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BACKGROUND OF THE INVENTION 



1. FIELD OF THE INVENTION 

The present invention relates to a system for managing copyrights for 
using, storing, copying, editing, or transferring digital data, particularly in 
multimedia applications. 

2. BACKGROUND ART 

In the information-oriented society of today, database systems are 
becoming wide spread in which it is possible to use various types of data, 
stored independently in each computer in the past, by connecting computers 
via communication lines. 

In such a database system, the information handled up to this point has 
been conventionally coded information that can be processed by a computer, 
and that contains a relatively small amount of information and 
monochrome binary data, such as facsimile information at most. It is not 
possible to handle data containing a relatively large amount of information, 
such as data for natural pictures or animation. 

With the rapid progress of digital processing technique for various 
electric signals, a technique is under development for digital processing of 
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picture signals other than binary data, handled only as analog signals in the 
past. 

By digitizing the picture signal, it is possible to handle a picture signal, 
e.g., a television signal, by a computer. "Multimedia systems" is an emerging 
technology of the future capable of simultaneously handling the data handled 
by computers and digitized picture data. 

Because picture data contains an overwhelmingly large amount of 
information compared with character data and audio data, it is difficult to 
store or transfer or process the picture data by computer. For this reason, 
techniques for compressing or expanding picture data have been developed. 
Further, several standards for compression/expansion of picture data have 
been established. For example, the following standards have been established 
as common standards: JPEG 0oint Photographic image coding Experts Group) 
standards for still pictures, H.261 standards for video conferences, MPEG1 
(Moving Picture image coding Experts Group 1) standards for picture 
accumulation, and MPEG2 standards for current television broadcasting and 
high definition television broadcasting. By using these new techniques, it is 
now possible to transmit digital picture data in real time. 

For analog data, which has been widely used in the past, the control of 
copyrights during processing has not been an important issue because the 
quality of the analog data deteriorates each time the data is stored, copied, 
edited, or transferred, the editing of a copyright produced due to the above 
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operation has not been a large problem. However, the quality of digital data 
does not deteriorate when the data is repeatedly stored, copied, edited, or 
transferred. Therefore, the management and control of copyrights during 
processing of digital data is an important issue. 

Up to now, there has been no adequate method for management and 
control of copyrights for digital data. It has been managed and controlled 
merely by copyright law or by contracts. In copyright law, only compensation 
for digital sound or picture recording devices has been prescribed. 

It is possible not only to refer to the content of a database, but also to 
effectively utilize the data obtained from the database by storing, copying, or 
editing the data, and also transferring the edited data to the database with the 
edited data registered as new data. Further, it is possible to transfer edited data 
to other persons via a communication link or by a proper recording medium. 

In a conventional database system, only character data is handled. 
However, in multimedia systems, sound data and picture data originally 
generated as analog data, are digitized and used as part of the database in 
addition to the other data in the database such as character data. 

Under such circumstances, it is an important question to determine 
how to handle copyrights of the data in the database. However, there are no 
means in the prior art for copyright management and control of such actions 
as copying, editing, transferring, etc of data. 



4 



The inventors of the present invention proposed a system for copyright 
management, wherein a permit key is obtained from a key control center via 
a public telephone line in Japanese Patent Laid-Open No, 46419/1994 and 
Japanese Patent Laid-Open No. 141004/1994. Japanese Patent Laid-Open No. 
132916/1994 to the same inventors also discusses an apparatus for copyright 
management and control. 

The database copyright management system of the prior applications 
use one or any combination of the copyright control program, the copyright 
information, and the copyright control message in addition to a permit key 
corresponding to a request. 

The copyright control message is displayed on a screen and advises or 
warns the user if the data is utilized in a manner inconsistent with the user's 
request permission. The copyright control program watches and controls data 
use so that the data is not utilized beyond the conditions of the user's request 
or permission. 

The copyright control program, the copyright information and the 
copyright control message are supplied together with a permit key in some 
cases, but they may be supplied with data in other cases. It is also possible to 
supply a part of them together with the permit key, and to supply the other 
part with the data. 
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For the data, the permit key, the copyright control message, the 
copyright information, or the copyright control program, there are the 
following three cases: they are transmitted in encrypted form and decrypted 
upon use; they are transmitted in encrypted form and decrypted only when 
they are displayed; or they not encrypted at all. 
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SUMMARY OF THE INVENTION 



The present invention provides a data copyright management system 
comprising a database for storing original data, a key control center for 
managing a crypt key, a copyright management center for managing a data 
copyright A communication network is provided to connect the database, 
the key control center, and the copyright management center, wherein data 
from the database is encrypted and the user decrypts the data with a crypt key 
obtained from the key control center or the copyright management center. 

For supplying data to a user, there are the following two methods: a 
one-way communication of encrypted data to the user such as by broadcasting; 
and a two-way communication of encrypted data to the user in accordance 
with the user's request. 

Different schemes are available for a cryptographic system; a secret-key 
cryptosystem, a public-key cryptosystem, or a system combining a secret-key 
and a public-key. A cryptographic system further uses a copyright control 
program for managing data copyrights. 

When a user stores, copies, or transmits data, the data is encrypted by a 
crypt key, which is obtained from the key control center or from the copyright 
management center, or generated by the copyright control program. 
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The present invention can be applied to copyright control not only a 
single data value but also a plurality of data values from a single database or a 
plurality of data values supplied from a plurality of databases. Further, an 
apparatus is also proposed for performing data copyright management. 
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BRIEF DESCRIPTION OF THE DRAWINGS 



Figure 1 illustrates a data copyright management system for 
embodiments 1,2, and 3 of the present invention. 

Figure 2 illustrates a data copyright management system of 
embodiment 4 of the present invention* 

Figure 3 illustrates a data copyright management system for 
embodiments 5,6, and 7 of the present invention. 

Figure 4 illustrates a data copyright management system for 
embodiments 8,9, 10 and 11 of the present invention. 

Figure 5 illustrates a data copyright management system for 
embodiments 12 and 13 of the present invention. 

Figure 6 is an illustration for data editing. 

Figure 7 is an illustration showing a digital cash system. 

Figure 8 illustrates a digital cash system for embodiments 17 and 18 of 
the present invention. 
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Figure 9 illustrates a video conference system for embodiment 19 of the 
present invention. 

Figure 10 illustrates an embodiment of a user terminal used for the 
data copyright management system of the present invention. 
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DETAILED DESCRIPTION OF THE INVENTION 



The present invention is a database copyright management system 
described with respect to multimedia applications. In the following 
description, numerous specific details are set forth to provide a more 
thorough description of the present invention. It will be apparent, however, 
to one skilled in the art, that the present invention may be practiced without 
these specific details. In other instances, well known features have not been 
described in detail so as not to obscure the present invention. 

The cryptography system, in general, includes a secret-key cryptosystem 
and a public-key cryptosystem. The secret-key cryptosystem is a cryptosystem 
in which the same crypt key is used for encryption and decryption. Although 
this cryptosystem requires relatively shorter time for encryption or 
decryption, once the secret-key is known, the cryption can be cryptanalyzed. 

The public-key cryptosystem is a cryptosystem which provides two keys: 
a key for encryption open to the public as a public-key and a key for decryption 
not open to the public. The key for encryption is referred to as a public key 
and the key for decryption is referred to as a private key. A party transferring 
information encrypts the information with a public-key of a receiving party 
and the receiving party decrypts the information with a private-key. While 
this cryptosystem requires relatively longer time for encryption or decryption, 
the private-key is hard to find and it is very difficult to cryptanalyze the 
cryption. 
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In the cryptography, the encryption of a plaintext M with a crypt key K 
to obtain a cryptogram C is expressed as 

OE(K,M) 

and the decryption of the cryptogram C with the cryptographic key K to obtain 
the plaintext M is expressed as 

M = D(K,C). 

The cryptosystem used for the present invention uses a secret-key 
cryptosystem in which the same secret-key Ks is used for encryption and 
decryption, and a public-key cryptosystem in which a public-key Kb is used for 
encryption of a plaintext and a private-key Kv is used for decryption of a 
cryptogram- 

In Japanese Patent Application No. 64889/1994, the present inventors 
proposed a copyright management method for primary utilization of digital 
data such as display (including sound) or storage of the digital data in a 
database system including real-time transmission of a digital picture as well as 
secondary utilization of the digital data such as copying, editing, or 
transferring of the digital data. 
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The present invention applies the data copyright management method 
proposed in the Japanese Patent Application No. 64889/1994 to provide a data 
copyright management system, 

[Embodiment 1] 

Figure 1 shows the first embodiment of the data copyright management 
system of the present invention. The first embodiment uses the secret-key 
system as a cryptosystem. 

The embodiment of Figure 1 comprises database 1 in which text data, 
binary data serving as a computer graphic display or a computer program, 
digital audio data, and digital picture data are stored in encrypted form, space 
satellite 2 such as a communications satellite or a broadcasting satellite, data 
recorder 3 such as a CD-ROM or a flexible disk, communication network 8 
such as a public telephone line offered by a communication enterprise or a 
CATV (cable TV) line offered by a cable television enterprise, primary user 
terminal 4, key control center 9 for managing a secret-key, and copyright 
management center 10 for managing data copyrights. 

Reference numerals 5, 6, and 7 represent a secondary user terminal, a 
tertiary user terminal, and n-order user terminal respectively, and 11, 12, and 
13 represent a secondary disk, tertiary disk, and n-order disk serving as a 
recording medium such as a flexible disk or CD-ROM respectively. The 
symbol "n" represents an optional integer. When "n" is larger than 4, a 
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corresponding user terminal and a corresponding disk are arranged between 
tertiary user terminal 6 and the n-order user terminal 7 and between the 
tertiary disk 12 and the n-order disk 13 respectively. 

In the above arrangement, database 1, key control center 9, copyright 
management center 10, primary user terminal 4, secondary user terminal 5, 
tertiary user terminal 6, and n-order user terminal 7 are connected to 
communication network 8- 

In Figure 1, the broken line indicates encrypted data flow, the solid line 
indicates requests from each user terminal, and the one-dot chain line 
indicates authorization information corresponding to a utilization request 
and a secret-key are transferred. 

When the user is entered in the system, a database utilization software 
is given to the user. The database utilization software includes not only 
normal communication software such as a data communication protocol but 
also a program for running a copyright control program. 

Original data MO such as text data, binary data as a computer graphic 
display or computer program, digital audio data, or digital picture data stored 
in database 1 or data recording medium 3 is one-way supplied to primary user 
terminal 4 via the satellite 2 or recording medium 3, In this case, the data is 
encrypted with a first secret-key Ksl: 
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CmOksl=E(Ksl,MO). 



Even if data is offered free of charge to public, it is necessary to encrypt 
the data in order to protect the copyright. 

Japanese Patent Application No. 64889/1994 discloses that the data 
utilization includes not only displaying of data but also storing, editing, 
copying, and transferring of the data, and that a use permit key is prepared for 
one or several forms of use and its management is executed by the copyright 
control program. It is further described in the Japanese application that data is 
encrypted again by the copyright control program for storing, copying, editing 
and transferring of the data other than display and edit operations. Thus, the 
data is encrypted for distribution, and decrypting is performed only when for 
display or edit operations in a user terminal with a copyright handling 
capability. 

This embodiment applies the method described above in the prior 
application. 

A primary user who desires primary utilization of the encrypted data 
CmOksl makes a request by sending the original data name or the original 
data number to key management center 9 via communication network 8 
from primary user terminal 4. In this case, the primary user must present 
information Iul for primary user to key management center 9. 
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Key management center 9 receiving the primary utilization request 
from primary user terminal 4 transfers the first secret-key Ksl for decrypting 
the encrypted original data CmOksl obtained from database 1 by the primary 
user and the second secret-key Ks2 for re-encrypting the decrypted original 
data MO or edited data Ml from the original data, together with a copyright 
control program P via communication network 8 to primary user terminal 4, 

In primary user terminal 4 receiving the first secret-key Ksl as a 
decryption key and the second secret-key Ks2 as an encryption/decryption key, 
the encrypted original data CmOksl is decrypted by using the copyright control 
program P and the first secret-key Ksl to use the decrypted original data MO 
directly or data Ml as edited. 

MO = D(Ksl, CmOksl) 

When the data M, which can be the original data MO or edited data Ml, 
is stored in a memory or a built-in hard disk drive of primary user terminal 4, 
only the primary user can use the data* However, when the data M is copied 
to external recording medium 11 such as a flexible disk or transmitted to 
secondary user terminal 5 via communication network 8, a copyright 
problem due to secondary utilization might occur. 

When the original data MO obtained by a primary user is directly copied 
and supplied to a secondary user, the copyright of the primary user is not 
affected on the data MO because the original data MO is not modified at all. 
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However, when the primary user produces new data Ml by editing the 
obtained data or by using other methods such as combining with other data, 
the copyright of the primary user, i.e., secondary exploitation right for 
secondary utilization of original data, is affected on the data ML 

Similarly, when a secondary user produces new data M2 by editing the 
original data MO or edited data Ml obtained from the primary user by 
methods such as combining with other data, the copyright of the secondary 
user; Le v secondary exploitation right on the secondary user is also effected* 

In this embodiment, in order to protect the copyrights, the data M is 
encrypted by the second secret-key Ks2 using the copyright control program P 
when the data M is stored, copied, or transferred. Thereafter, in primary user 
terminal 4, the data M is decrypted and encrypted by the second secret-key Ks2: 

Cmks2=E(Ks2,M) ' 

M = D(Ks2, Cmks2). 

It is also possible to limit the number of repeated operations by the 
copyright control program. 

When the data M is copied to external recording medium 11 or 
transmitted via communication network 8, the first secret-key Ksl and the 
second secret-key Ks2 in primary user terminal 4 are disused by the copyright 



17 



control program P. Therefore, in order to reuse the data M, the primary user 
needs to request for utilization of the data M to key control center 9 to 
reobtain the second secret-key Ks2. 

If the user receives the regrant of the second secret-key Ks2, that 
represents secondary utilization of data in which the data M has been copied 
to external recording medium 11 or transmitted to secondary user terminal 5 
via communication network 8* Therefore, the fact is registered in copyright 
management center 10 from key control center 9 and subsequent secondary 
utilization comes possible. 

The data M is moved from primary user terminal 4 to secondary user 
terminal 5 by external recording medium 11 or communication network 8. 
When the data M is copied to external recording medium 11 or transmitted 
via communication network 8, it is encrypted by the second secret-key Ks2. 

When the data M is copied to external recording medium 11 and 
transmitted via communication network 8, the first secret-key Ksl and the 
second secret-key Ks2 in primary user terminal 4 are disused* In this case, 
uncrypted primary user information Iul is added to the encrypted data Cmks2 
stored in primary user terminal 4 and when the encrypted data Cmks2 is 
transmitted to a secondary user, the primary user information Iul is also 
transferred* 
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A secondary user who desires secondary utilization of the encrypted 
data Cmks2 copied or transmitted from a primary user must present original 
data name or data number to copyright management center 10 via 
communication network 8 by secondary user terminal 5 and also present the 
secondary user information Iu2 to request secondary utilization of the data 
Cmks2 to the center 10. In this case, the secondary user further presents the 
uncrypted primary user information Iul added to the encrypted data Cmks2 
in order to clarify the relationship with the primary user. 

Copyright management center 10 confirms that the primary user has 
received a regrant of the second secret-key Ks2 for secondary utilization of the 
data, in accordance with the presented primary user information Iul. 
Copyright management center 10, then, transfers the second secret-key Ks2 
serving as a decryption key and the third secret-key Ks3 serving as an 
encryption/ decryption key to secondary user terminal 5 via communication 
network 8, 

In secondary user terminal 5 receiving the second secret-key Ks2 and 
the third secret-key Ks3, the encrypted data Cmks2 is decrypted using the 
second secret-key Ks2 by the copyright control program P 

M = D(Ks2, Cmks2) 

and is secondarily utilized for display or edit operations. 
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In this embodiment key control center 9 processes a primary 
utilization requests and copyright management center 10 processes a 
secondary utilization requests. While the data M supplied to a primary user 
is encrypted by the first secret-key Ksl, the data M supplied to a secondary user 
is encrypted by the second secret-key Ks2. Further, the first secret-key Ksl and 
the second secret-key Ks2 are transferred to the primary user as crypt keys 
from key control center 9. 

Therefore, if the secondary user, instead of the primary user, falsely 
makes a request for primary utilization to key control center 9, the first secret- 
key Ksl for decryption and the second secret-key Ks2 for 
encryption/decryption are transferred to the secondary user. However, the 
secondary user cannot decrypt the encrypted data Cmks2 by using the first 
secret-key Ksl transferred as a decryption key. 

Therefore, it is impossible to falsely request for data utilization and as a 
result, not only the original copyright of data but also the copyright of the 
primary user on the data are protected. 

When storing, copying, or transferring of the data M other than 
displaying and displaying for editing is performed in secondary user terminal 
5, the data M is encrypted using the third secret-key Ks3 by the copyright 
control program P and thereafter, the data is decrypted and encrypted by the 
third secret-key Ks3: 
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Cmks3 = E(Ks3, M) 



M = D(Ks3, Cmks3). 

Further, it is free in principle that a secondary user displays and edits 
data to obtain the edited data M2. In this case, it is possible to limit the . 
repetitions of the operation by the copyright control program P. 

When the data M is copied to external recording medium 12 or 
transmitted via communication network 8, the second secret-key Ks2 and the 
third secret-key Ks3 in secondary user terminal 5 are disused by the copyright 
control program P, Therefore, in order to reuse the data M, the secondary 
user makes a request for the utilization of the data to copyright management 
center 10 to reobtain the third secret-key Ks3. 

The fact that the secondary user receives a regrant of the third secret- 
key Ks3 represents secondary utilization of data in which the data M has been 
copied to external recording medium 12 or transmitted to tertiary user 
terminal 6 via communication network 8. Therefore, the fact is entered in 
copyright management center 10 and allows the secondary user for further 
data use. 

The data M is moved from secondary user terminal 5 to tertiary user 
terminal 6 by external recording medium 12 or by communication network 8. 
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When the data M is copied to external recording medium 12 or transmitted 
via communication network 8, it is encrypted by the third secret-key Ks3. 

When the data M is copied to external recording medium 12 or 
transmitted to tertiary user terminal 6 via communication network 8, the 
second secret-key Ks2 and the third secret-key Ks3 in secondary user terminal 
5 are disused. In this case, the uncrypted secondary user information Iu2 is 
added to the encrypted data Cmks3 stored in secondary user terminal 5, and 
when the encrypted data Cmks3 is transmitted to a tertiary user, the secondary 
user information Iu2 is also transferred. 

For adding user information to data, there are the following two cases: 
every information is added to data whenever it is copied or transmitted; and 
the history updated whenever the data is copied or transmitted is stored in 
the copyright management center. 

A tertiary user who desires tertiary utilization of the encrypted data 
Cmks3 copied or transmitted from the secondary user must present original 
data name or number to copyright management center 10 from a tertiary user 
terminal 6 via communication network 8 together with the tertiary user 
information Iu3 to request tertiary utilization of the data. In this case, the 
tertiary user further presents the uncrypted secondary user information Iu2 
added to the encrypted data Cmks3 in order to show the relationship with the 
secondary user. 
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Copyright management center 10 confirms that the secondary user has 
received a regrant of the third secret-key Ks3 for tertiary utilization of the 
data, in accordance with the presented secondary user information Iu2. 
Copyright management center 10, then, transfers the third secret-key Ks3 
serving as a decryption key and the fourth secret-keyKs4 serving as an 
encryption/decryption key to tertiary user terminal 6 via communication 
network 8. 

In tertiary user terminal 6 receiving the third secret-key Ks3 and the 
fourth secret-key Ks4, the encrypted data Cmks3 is decrypted using the third 
secret-key Ks3 by the copyright control program P 

M = D(Ks3, Cmks3) 

and is tertiarily utilized for operations such as display or edit. 

In this embodiment, the data M supplied to a primary user is encrypted 
by the first secret-key Ksl and the data M supplied to a secondary user is 
encrypted by the second secret-key Ks2, and the data M supplied to a tertiary 
user is encrypted by the third secret-key Ks3. 

Therefore, if the tertiary user, instead of the primary user, falsely sends 
a request for primary utilization to key control center 9, the first secret-key Ksl 
for decryption and the second secret-key Ks2 for encryption/decryption are 
transferred to the tertiary user. However, it is impossible to decrypt the 
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encrypted data Cmks3 by the first secret-key Ksl transferred as a decryption 
key. Further, if the tertiary user, instead of the secondary user, falsely sends a 
request for secondary utilization to key control center 9, the second secret-key 
Ks2 and the third secret-key Ks3 are transferred to the tertiary user as a 
decryption key and an encryption/ decryption key respectively. However, it is 
impossible to decrypt the encrypted data CmKs3 by the second secret-key Ks2 
transferred as a decryption key. 

Therefore, it is impossible to falsely request data utilization. As a 
result, not only the original copyright of the data but also the copyrights of the 
primary and secondary users on the data are protected. 

The same procedure is applied to quaternary and subsequent 
utilization. 

In the above described embodiment, database 1, key control center 9, 
and copyright management center 10 are separately arranged. However, it is 
not always necessary to arrange them separately. It is also possible to arrange 
all of or two of them integrally. 

Further, it is also possible to send a request for a regrant of a secondary 
crypt key from the primary user to copyright management center 10 instead of 
to key control center 9 as described in the above embodiment . 

[Embodiment 2] 
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Though the structure of this embodiment is mostly the same as that of 
the embodiment 1, a copyright control program and, if required, first and 
second secret-keys are encrypted and supplied. 

Also in the case of this embodiment, similarly to the case of the first 
embodiment, original data is encrypted and supplied in a one-way 
communication to a user from a single database and the user selects desired 
data out of the original data. 

Because the system structure used for the second embodiment is the 
same as that of embodiment 1 shown in Figure 1, description of the system 
structure is omitted. 

In this embodiment, the original data MO stored in database 1 is 
supplied in a one-way communication to primary user terminal 4 via the 
satellite 2, recording medium 3, or communication network 8. The data MO is 
encrypted by the first secret-key Ksl: 

CmOksl = E(Ksl, MO). 

A primary user who desires primary utilization of the supplied 
encrypted data CmOksl sends a request for the primary utilization of the 
encrypted original data CmOksl to key control center 9 by using primary user 
terminal 4 and presenting an original data name or an original data number 
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via communication network 8* In this case, the primary user must present 
the primary user information Iul to key control center 9. 

The key management 9 receiving the request of the primary utilization 
of the encrypted original data CmOksl generates a secret-key Ksul unique to 
the primary user using the primary user information Iul and transfers it to 
copyright management center 10. 

Copyright management center 10 receives the secret-key Ksul and 
encrypts the copyright control program P by using the secret-key Ksul which 
is unique to the primary user. 

Cpksul =E(Ksul,P) 

Copyright management center 10 transfers the encrypted copyright control 
program Cpksul to key control center 9. The encrypted copyright control 
program Cpksul thus generated is unique to the primary user. 

Key control center 9 transfers the first secret-key Ksl for decryption and 
the second secret-key Ks2 for decryption/encryption to primary user terminal 
4 via communication network 8, together with the encrypted copyright 
control program Cpksul received from copyright management center 10* 

In primary user terminal 4 receiving the encrypted copyright control 
program Cpksul, first secret-key Ksl, and second secret-key Ks2, database 
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system software S previously distributed generates a primary user unique 
secret-key Ksul in accordance with the primary user information Iul: 



Ksul = S(Iul), 

An encrypted copyright control program Cpksul is decrypted by the 
generated primary user unique secret-key Ksul: 

P = D(Ksul, Cpksul), 

the encrypted original data CmOksl is decrypted by the first secret-key Ksl 
using the copyright control program P: 

MO = D(Ksl, CmOksl), 

and the decrypted original data MO directly or edited data Ml is used. 

When the data M such as the original data MO or edited data Ml is 
stored, copied, or transferred, it is encrypted by the copyright control program 
P using the secret-key Ks2, and thereafter the data M is decrypted and 
encrypted in primary user terminal 4 by the second secret-key Ks2: 

Cmks2 = E(Ks2, M) 
M = D(Ks2, Cmks2). 
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When the data M is copied to external recording medium 11 or the data 
is transmitted via communication network 8, the first secret-key Ksl and the 
second secret-key Ks2 in primary user terminal 4 are disused by the copyright 
control program P. Therefore, when the primary user uses the data M again, 
the user sends a request for utilization of the data M to key control center 9 to 
reobtain the second secret-key Ks2. 

The fact that the primary user receives a regrant of the second secret- 
key Ks2 represents secondary utilization of data in which the data M has been 
copied to external recording medium 11 or transmitted to secondary user 
terminal 5 via communication network 8- Therefore, this is entered in 
copyright management center 10 from key control center 9 and thereafter, 
secondary utilization of the data can be made. 

The data M is moved from primary user terminal 4 to secondary user 
terminal 5 by external recording medium 11 or by communication network 8. 

When the data M is copied to external recording medium 11 or 
transmitted via communication network 8, it is encrypted by the second 
secret-key Ks2* 

When the data M is copied to external recording medium 11 or 
transmitted via communication network 8, the first secret-key Ksl and the 
second secret-key Ks2 in primary user terminal 4 are disused. In this case, the 
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uncrypted information Iul on a primary user is added to the encrypted data 
Cmks2 stored in primary user terminal 4. Therefore, when the encrypted data 
Cmks2 is transmitted to a secondary user, the primary user information Iul is 
also transferred to the user. 

A secondary user who desires secondary utilization of the encrypted 
data Cmks2 copied or transmitted from the primary user must designate a 
data name or number added to the original data to copyright management 
center 10 via communication network 8 by secondary user terminal 5 and also 
present a secondary user information Iu2 to request for the secondary 
utilization of the data to the center 10. In this case, the secondary user further 
presents the uncrypted primary user information Iul added to the encrypted 
data Cmks2 in order to clarify the relationship with the primary user. 

Copyright management center 10 confirms that the primary user has 
received a regrant of the secondary secret-key Ks2 for secondary-utilizing the 
data in accordance with the presented primary user information Iul and then, 
generates a secret-key Ksu2 unique to the secondary user in accordance with 
the presented secondary user information Iu2. 

Copyright management center 10 encrypts the copyright control 
program P by the secondary user unique secret-key Ksu2 

Cpksu2 = E(Ksu2,P) 
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and transfers the encrypted copyright control program Cpksu2, second secret- 
key Ks2 serving as a decryption key, and third secret-key Ks3 serving as an 
encryption/ decryption key via communication network 8 to secondary user 
terminal 5, 

Further, the information Iul for a primary user may be added to the 
encrypted copyright control program Cpksu2. 

In secondary user terminal 5 receiving the second secret-key Ks2 and 
the third secret-key Ks3, database utilization software generates a secondary 
user unique secret-key Ksu2 in accordance with the secondary user 
information Iu2 

Ksu2 = S(Iu2), 

and an encrypted copyright control program Cpksu2 by the generated 
secondary user unique secret-key Ksu2 

P = D(Ksu2, Cpksu2), 

the encrypted original data Cmks2 is decrypted by the second secret-key Ks2 
using the decrypted copyright control program P 

M = D(Ks2, Cmks2), 
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and the decrypted data M directly or by editing it is used. 

Thus, by generating a crypt key unique to a user in accordance with the 
information of the user requests for utilization, and encrypting a copyright 
control program by the generated user unique crypt key, the security of a data 
copyright management system is improved. 

Further, by encrypting each secret-key to be supplied to a user, using the 
user unique crypt key, the security of the data copyright management system 
can be further improved. 

[Embodiment 3] 

As still another method for solving the copyright problem caused 
when the data M is copied to external recording medium 11 or transmitted 
via communication network 8 in the system shown in Figure 1, -it is possible 
to limit the primary utilization request by a user of primary user terminal 4 to 
only for permits of displaying, storing and editing so that other utilization 
such as copying and transferring cannot be authorized except by separate 
requests, and disuse the first secret-key Ksl and the second secret-key Ks2 in 
primary user terminal 4 when the data M is copied to external recording 
medium 11 or transmitted to secondary user terminal 5 via communication 
network 8. 
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Thus, it is possible for copyright management center 10 to more 
securely control copy or transfer operations of the data M. 

[Embodiment 4] 

Figure 2 shows a structure of embodiment 4 of the data copyright 
management system of the present invention. In Figure 1, encrypted data is 
one-way supplied via the satellite 2, recording medium 3, or communication 
network 8- In embodiment 2, however, encrypted data is supplied in a two- 
way communication in accordance with a request from the primary user 4. 

This embodiment uses the public-key cryptosystem as a crypt key 
system. It is possible that embodiment 2 can be applied for a satellite 
broadcast, ground wave broadcast, CATV broadcast or a recording medium 
other than a database as data supply means provided with advertisement 
requiring no charge or encryption . 

In the system shown in Figure 2 similarly to the system shown in 
Figure \, reference numeral 1 represents a database, 4 represents a primary 
user terminal, 5 represents a secondary user terminal, 6 represents a tertiary 
user terminal, and 7 represents an n-order user terminal 

Reference numeral 14 represents a secondary copyright management 
center, 15 represents a tertiary copyright management center, 16 represents an 
n-order copyright management center, 8 represents a communication 
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network such as a public telephone line offered by a communication 
enterprise or a CATV line offered by a cable television enterprise* 

In the above arrangement, database 1, primary user terminal 4, 
secondary user terminal 5, tertiary user terminal 6, n-order user terminal 7, 
secondary copyright management center 14, tertiary copyright management 
center 15, and n-order copyright management center 16 are connected to 
communication network 8. They can also be connected to each other. 

In Figure 2, the broken line represents a path for encrypted data, the 
solid line represents a path of requests from each user terminal, the one-dot 
chain line represents a path through which authorization information sent 
from each database corresponding to a utilization request and a crypt key are 
transferred, and a two-dot chain line represents a path through which 
copyright information is transferred from the database or each copyright 
management center database to a next-order copyright management center 
database. 

Each user who uses this system is previously entered in a database 
system and in this time, database utilization software is provided to the user, 
The database utilization software includes a program for decrypting an 
encrypted copyright control program in addition to normal communication 
software such as a data communication protocol. 
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To use database 1, a primary user must prepare primary-user 
authentication data Aul, a first public-key KM, a first private-key Kvl 
corresponding to the first public-key Kbl, a second public-key Kb2, and a 
second private-key Kv2 corresponding to the second public-key Kb2, and 
accesses database 1 from primary user terminal 4 via communication network 
8. 

Database 1 receives the primary-user authentication data Aul, first 
public-key Kbl and second public-key Kb2 from the primary user, confirms 
the primary-user authentication data Aul, and transfers the confirmed 
primary-user authentication data Aul to the secondary copyright 
management center 14 as the primary user information Iul. 

Database 1 prepares two secret-keys, i.e., the first secret-key Ksl and the 
second secret-key Ks2. The two secret-keys may be prepared by using key 
control center 9 of embodiment 1 shown in Figure 1. 

In the prepared first secret-key Ksl and second secret-key Ks2, the 
second secret-key Ks2 is also previously transferred to the copyright 
management center 14 

As the result of the transfers, the primary user information Iul 
corresponding to primary utilization, original copyright information Ic and 
the second secret-key Ks2 are stored in the copyright management center 14. 
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In this case, the original copyright information Ic is used for copyright 
royalties distribution. 

When a primary user who desires data utilization accesses database 1 
from primary user terminal 4, a data menu is transferred to him. In this case, 
information for charges may be displayed together with the data menu, . 

When the data menu is transferred, the primary user retrieves in the 
data menu to select the data M. In this case, the original copyright 
information Ic of the selected data M is transmitted to the copyright 
management center 14, 

The original data MO is read out of database 1 in accordance with a 
request of a primary user. The original data MO is then encrypted by the first 
secret-key Ksl: 

CmOksl=E(Ksl, MO). 

The encrypted data CmOksl is provided with the uncrypted original 
copyright information Ic. 

The first secret-key Ksl is encrypted by the first public-key Kbl and the 
second secret-key Ks2 is encrypted by the second public-key kb2: 

Ckslkbl = E(Kbl, Ksl) 



35 



Cks2kb2 = E(Kb2,Ks2). 



While the copyright control program P is also encrypted by the second 
public-key Ks2 

CpKs2 = E(Ks2 / P) / 

the copyright control program P may not be encrypted by the second secret-key 
Ks2, but it may be encrypted by any other proper crypt key. 

The encrypted original data CmOksl, encrypted copyright control 
program Cpks2, and two encrypted secret-keys Ckslkbl and Cks2kb2 are 
transferred to primary user terminal 4 via communication network 8, and the 
user is charged for the service, if necessary. 

It is possible to store the encrypted copyright control program Cpks2 in 
a storage device such as ROM in the user terminal 4 instead of being supplied 
from database 1. 

The primary user receiving the encrypted original data CmOksl, two 
encrypted secret-keys Ckslkbl and Cks2kb2, and encrypted copyright control 
program Cpks2 from database 1 decrypts the encrypted first secret-key Ckslkbl 
by the database utilization software using the first private-key Kvl 
corresponding to the first public-key Kbl; 
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Ksl - D(Kvl, Ckslkbl), 

and decrypts the encrypted second secret-key Cks2kb2 using the second 
private-key Kv2 corresponding to the second public-key Kb2: 

Ks2 = D(Kv2, Cks2kb2). 

The primary user decrypts the encrypted copyright control program 
Cpks2 using {he decrypted second secret-key Ks2: 

P = D(Ks2,Cpks2). 

Finally, the primary user decrypts the encrypted data CmOksl by the 
decrypted copyright control program P using the decrypted first secret-key Ksl; 

MO = D(Ksl, CmOksl) 

and uses the decrypted original data MO or data Ml as edited. 

As described above, the first private-key Kvl and second private-key 
Kv2 are crypt keys prepared by the primary user, but the keys are not known 
to others. Therefore, even if a third party obtains the data M, it is impossible 
to use the encrypted data M by decrypting it 
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Thereafter, the data M such as the original data MO or the edited data 
Ml is encrypted and decrypted by the second secret-key Ks2 for operations 
such as store, copy, or transmit: 

Cmks2 = E(Ks2,M) 

M = D(Ks2, Cmks2). 

The decrypted second secret-key Ks2 is thereafter used as a crypt key for 
encrypting/decrypting data for storing, copying, or transferring the data. 

The first private-key Kvl and second private-key Kv2, the first secret- 
key Ksl and second secret-key Ks2, the data M, the copyright control program 
P, the original copyright information Ic, and also the original copyright 
information Ic and secondary copyright information Icl for information of 
the primary user and the date and time of edit operations by the primary user 
are stored in primary user terminal 4. 

It is further protected by attaching the copyright information Icl to the 
data as copyright information label, and adding the digital signature. 

The encrypted data Cmks2 is encrypted before distribution- Since the 
copyright information label provides a clue to obtain the second secret-key 
Ks2 which is the key for decryption, the second secret key Ks2 cannot be 
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obtained when the copyright information label is removed from the 
encrypted data Cmks2* 

When the encrypted data Cmks2 is stored in primary user terminal 4, 
the second secret-key Ks2 is stored in the terminal 4 However, when the 
encrypted data Cmks2 is not stored in primary user terminal 4 but is copied to 
the recording medium 11 or transmitted to secondary user terminal 5 via 
communication network 8, the second secret-key Ks2 is disused in order to 
prevent subsequent utilization of the data in primary user terminal 4. 

In this case, it is possible to set a limit on the number of repeated 
operations such as copy or transfer of the data so that the second secret-key 
Ks2 is not disused within limited repetitions of copying and transferring of 
the data. 

A primary user who is going to copy the data M to external recording 
medium 11 or transmit the data M via communication network 8 must 
prepare the second secret-key Ks2 to encrypt the data M by this second secret- 
key Ks2 before copying or transferring the data: 

Cmks2 = E(Ks2, M). 

The uncrypted original copyright information Ic and primary-user 
copyright information Icl are added to the encrypted data Cmks2. 
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Before using a database, a secondary user, similar to the primary user, 
prepares authentication data Au2 to authenticate the secondary user, a third 
public-key Kb3 and a third private-key Kv3 corresponding to the third public- 
key Kb3, a fourth public-key KM, and a fourth private-key Kv4 corresponding 
to the fourth public-key Kb4. 

A secondary user who desires secondary utilization of the copied or 
transmitted encrypted data Cmks2 must designate original data name or 
number to the secondary copyright management center 14 to request 
secondary utilization to the center 14 from secondary user terminal 5 via 
communication network 8. In this case, the secondary user also transfers the 
third public-key Kb3 and the fourth public-key Kb4 as well as the secondary 
user authentication data Au2, original copyright information Ic and primary 
user copyright information Icl. 

The secondary copyright management center 14 receives the secondary 
utilization request from the secondary user, confirms the secondary-user 
authentication data Au2, and transfers confirmed secondary-user 
authentication data Au2 to the tertiary copyright management center 15 as 
secondary user information. 

When the secondary copyright information Icl of the primary user is 
transferred, the secondary copyright information Icl is confirmed by the 
secondary copyright center 14. The secondary copyright information Icl is 
then transferred to the tertiary copyright management center 15* 
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The secondary copyright management center 14 prepares a third secret- 
key Ks3. The third secret-key Ks3 can also be prepared by key control center 9 
shown in embodiment 1. 

The prepared third secret-key Ks3 is transferred to and stored in the 
tertiary copyright management center 15. 

As the result of the transfers, primary user copyright information Icl, 
primary user information Iul, original copyright information Ic, secondary 
user information Iu2, and third secret-key Ks3 are stored in the tertiary 
copyright management center 15. The primary user copyright information 
Icl, and primary user information Iul are used for copyright royalties 
distribution. 

Similarly, copyright information for secondary exploitation right Icn-1 
of (n-l)-order user, primary user information Iul, original copyright 
information Ic, n-order user information Iun, and n-th secret-key Ksn are 
stored in n-order copyright management center 16. 

The primary user information Iul, original copyright information Ic 
and second secret-key Ks2 are read out of the secondary copyright 
management center 14. The original copyright information Ic is used for 
copyright royalties distribution. 
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The second secret-key Ks2 and third secret-key Ks3 are then encrypted 
by the third public-key Kb3 and fourth public-key Kb4 of the secondary user 
respectively: 

Cks2kb3 = E(Kb3,Ks2) 

Cks3kb4 = E(Kb4,Ks3). 

The copyright control program P is encrypted by the third secret-key Ks3 
and the third secret-key Ks3 is encrypted by the fourth public-key Kb4; 

Cpks3 = E(Ks3,P) 

Cks3kb4 = E(Kb4,Ks3). 

The encrypted copyright control program Cpks3, encrypted second 
secret-key Cks2kb3, and encrypted third secret-key Cks3kb4 are transferred to 
secondary user terminal 5 via communication network 8, In this case, 
charging is performed, if necessary. 

The secondary user receives two encrypted secret-keys Cks2kb3 and 
Cks3kb4 and the encrypted copyright control program Cpks3 from the 
secondary copyright management center 14, decrypts the encrypted second 
secret-key Cks2kb3 by the third private-key Kv3, and decrypts the encrypted 
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third secret-key Cks3kb4 by the fourth private-key Kv4 corresponding to the 
fourth public-key Kb4, using the database utilization software: 

Ks2 = D(Kv3, Cks2kb3) 

Ks3 = D(Kv4, Cks3kb4). 

The encrypted copyright control program Cpks3 is decrypted by the 
decrypted third secret-key Ks3: 

P = D(Ks3,Cpks3). 

Then, the encrypted data Cmks2 is decrypted for the decrypted copyright 
control program P and the decrypted second secret-key Ks2: 

M = D(Ks2,Cmks2). 

As described above, the third private-key Kv3 and the fourth private- 
key Kv4 are prepared by a secondary user, but they are not known to others. 
Therefore, even if a third party obtains the encrypted data Cmks2, it is 
impossible to use the data by decrypting it. 

In the above described embodiment, database 1, secondary copyright 
management center 14, tertiary copyright management center 15, and n-order 
copyright management center 16 are separately arranged in order to avoid the 
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congestion of utilization requests. However, if the congestion of utilization 
requests is not a critical issue, it is possible to combine all or some of these 
functions into one- 

[Embodiment 5] 

Figure 3 shows the system structure of embodiment 5* In embodiment 
5, original data is encrypted and supplied in a one-way communication from 
a single database and a user selects necessary data out of the supplied original 
data to use it This embodiment uses a secret-key cryptosystem as its crypt key 
system. 

In Figure 3, reference numeral 1 represents a database in which text 
data, binary data serving as computer graphics display or computer program, 
digital audio data, and digital picture data are stored by being encrypted, 2 
represents a space satellite such as a communication satellite or a broadcasting 
satellite, 3 represents a data recording medium such as a CD-ROM or a flexible 
disk, 8 represents a communication network such as a public telephone line 
offered y a communication enterprise or a CATV line offered by a cable 
television enterprise, and 4 represents a primary user terminal Reference 
numeral 17 represents a copyright management center for managing the 
copyright on data, and 5, 6, and 7 represent a secondary user terminal, tertiary 
user terminal, and n-order user terminal, respectively. 
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In the above arrangement, database 1, copyright management center 17, 
primary user terminal 4, secondary user terminal 5, tertiary user terminal 6 
and n-order user terminal 7 can be connected with each other by 
communication network 8. 

Each user who uses this system is previously entered in the database 
system, and when entered in the system, database utilization software is 
given to the user- This software includes a normal communication software 
program such as a data communication protocol 

Though the software for using the database system can be stored in a 
hard disk in a user terminal, it may be stored in a mask ROM, EPROM, or 
EEPROM in the user terminal. 

In this system, a secret-key generation algorithm is stored in a user 
terminal in order to generate a secret-key from the user side* However, 
because the secret-key generation algorithm is not always secret, it is also 
possible to store the algorithm in the database utilization software supplied to 
a user when the user is entered for database utilization in the database system. 

When original data is supplied free of charge because it is provided 
with advertisement, it may not be necessary to be encrypted* Even in this 
case, however, a procedure for using a copyright is necessary because the data 
is provided with a copyright. 
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In Figure 3, the broken line represents a path of encrypted data, the 
solid line represents a path requested from each user terminal, and the one- 
dot chain line represents a path through which a crypt key corresponding to a 
utilization request is transferred. 

The original data MO stored in database 1 or the data recording medium 
3 is supplied to primary user terminal 4 through a cable transmission via 
communication network 8, by broadcast waves via the satellite 2 or the like, 
or by recording medium 3. The data MO is encrypted by the first secret-key 
Ksl: 

CmOksl = E(Ksl, MO). 

Similar to embodiments 1 to 4, in order to protect the copyright of the 
original data CmOksl, which is encrypted to be supplied, when store, copy, or 
transfer operations, which is utilization other than display or display for 
editing, are applied to the original data MO in primary user terminal 4, the 
second secret-key Ks2 is used to encrypt the data: 

Cm0ks2 = E(Ks2,M0) 

as disclosed in Japanese Patent Application No, 64889/1994 which is the prior 
application by the inventors of the present invention. In the subsequent 
utilization, the original data is encrypted/decrypted by the second secret-key 
Ks2. 
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A primary user obtaining the encrypted original data CmOksl 
designates an original data name or original data number from primary user 
terminal 4 to request the primary utilization of the encrypted original data 
CmOksl of the copyright management center 17, 

The copyright management center 17 receives the primary utilization 
request of the encrypted original data CmOksl from primary user terminal 4 
and transfers the copyright control program P to primary user terminal 4 
together with the first secret-key Ksl. 

The copyright control program P includes a crypt program having a 
cryptographic algorithm, which generates a secret-key and decrypts or encrypts 
data. 

Primary user terminal 4 receives the first secret-key Ksl and the 
copyright control program P, decrypts the encrypted original data CmOksl by 
the first secret-key Ksl using the crypt program 

M0 = D(Ksl, CmOksl) 

and uses the decrypted original data MO directly or data Ml as edited. 

The copyright control program P generates a second secret-key Ks2 in 
accordance with the first secret-key Ksl: 
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Ks2 = P(Ksl). 



When the data M as the original data MO or the edited data Ml is stored 
in primary user terminal 4, copied to the recording medium 11, or 
transmitted to secondary user terminal 5, the data is encrypted by the second 
secret-key Ks2 using the copyright control program P: 

Cmks2 = E(Ks2, M). 

The data Cmks2 encrypted by the second secret-key Ks2 is copied to the 
recording medium 11 or transmitted to secondary user terminal 5 via 
communication network 8 together with the original data name or original 
data number* 

The secondary user obtaining the encrypted data Cmks2 makes a 
request for the secondary utilization of the encrypted data Cmks2 to the 
copyright management center 17 from the secondary terminal 5 by 
designating the original data name or original data number. 

The copyright management center 17 receives the secondary utilization 
request of the encrypted data Cmks2, finds out the first secret-key Ksl in 
accordance with the original data name or original data number, generates 
the second secret-key Ks2 by the first secret-key Ksl using the copyright 
control program P 
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Ks2 = P(Ksl), 



and supplies the generated second secret-key Ks2 to the secondary user 
terminal 15 together with the copyright control program P. 

Secondary user terminal 5 receives the second secret-key Ks2 and the 
copyright control program P, decrypts the data Cmks2 encrypted by the second 
secret-key Ks2 using the second secret-key Ks2 

M = D(Ks2, Cmks2) 

and uses the data by displaying or editing it 

When the decrypted data M is stored in secondary user terminal 5, 
stored in the recording medium 12, or transmitted to tertiary user terminal 6 
via communication network 8, the data M is encrypted by the second secret- 
key. 

Further, it is possible to make the copyright control program P generate 
the third secret-key Ks3 in accordance with the second secret-key Ks2: 

Ks3=P(Ks2), 
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so that the data M is encrypted by the third secret-key Ks3 using the copyright 
control program P when the data M is stored in secondary user terminal 5, 
copied to the recording medium 12, or transmitted to tertiary user terminal 6 
via communication network 8: 

Cmks3 = E(Ks3,MX 

[Embodiment 6] 

In embodiment 6, original data is encrypted and supplied in a one-way 
communication from a single database to a user and the user selects necessary 
data out of the original data to use it, similar to embodiment 5. 

This embodiment uses a secret-key cryptosystem as its crypt key system 
and a second secret-key is generated in accordance with primary user 
information and a first secret-key. 

Because the system structure of embodiment 6 is the same as that of 
embodiment 5 shown in Figure 3, its description is omitted. 

In the embodiment 6, the original data MO stored in database 1 is 
encrypted via communication network 8, by broadcast waves via the satellite 
2, or by the recording medium 3 using the first secret-key Ksl: 

CmOksl-E(Ksl,MO) 
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and supplied to primary user terminal 4. 

A primary user obtaining the encrypted original data CmOksl makes a 
request for primary utilization of the encrypted original data CmOksl from 
primary user terminal 4. The primary user must designate an original data 
name or original data number and present the primary user information Iul. 

The copyright management center 17 receives the primary utilization 
request of the encrypted original data CmOksl from the primary user and 
supplies the first secret-key Ksl and the copyright control program P to 
primary user terminal 4. 

The copyright control program P includes a crypt program having a 
cryptographic algorithm, which generates a secret-key and thus performs 
decryption and encryption. 

Primary user terminal 4 receives the first secret-key Ksl and the 
copyright control program P, decrypts the encrypted original data CmOksl by 
the first secret-key Ksl using the crypt program P 

MO = D(Ksl, CmOksl) 

and uses the decrypted original data MO or data Ml as edited 



51 



The supplied copyright control program P generates the second secret- 
key Ks2 in accordance with the primary user information Iul or the primary 
user information Iul and the first secret-key Ksl: 

Ks2 = POul) or 

Ks2 P(Iul + Ksl). 

Because the generated second secret-key Ks2 is based on the primary 
user information Iul, it is impossible to generate the second secret-key Ks2 
without the correct primary user information Iul. 

Further, it is possible to use primary user data generated in accordance 
with the primary user information Iul or the terminal number of primary 
user terminal 4 instead of the primary user information Iul. 

When the data M serving as the original data MO or edited data Ml is 
stored in primary user terminal 4, copied to the recording medium 11, or 
supplied to secondary user terminal 5 via communication network 8, the data 
M is encrypted by the second secret-key Ks2 using the copyright control 
program P: 

Cmks2 = E(Ks2, M). 
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The data Cmks2 encrypted by the second secret-key Ks2 is copied to the 
recording medium 11 or supplied to secondary user terminal 5 via 
communication network 8 together with its original data name or original 
data number and the primary user information Iul. 

A secondary user obtaining the encrypted data Cmks2 makes a request 
for secondary utilization of the data M to the copyright management center 17 
from secondary user terminal 5, The user must designate the original data 
name or original data number and present the primary user information Iul. 

The copyright management center 17 receives the secondary utilization 
request of the data M, finds out the first secret-key Ksl in accordance with the 
original data name or original data number, generates the second secret-key 
Ks2 in accordance with either of the primary user information Iul and first 
secret-key Ksl, or both, and supplies the generated second secret-key Ks2 to 
secondary user terminal 5 together with the copyright control program P. 

The secondary user receives the second secret-key Ks2 and the copyright 
control program P and decrypts the encrypted data Cmks2 by the second 
secret-key Ks2 using the copyright control program P and in secondary user 
terminal 5 to use it: 

M = D(Ks2, Cmks2). 
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When the data M is stored in secondary user terminal 5, copied to the 
recording medium 12, or supplied to tertiary user terminal 6 via 
communication network 8, the data is encrypted by the second secret-key Ks2. 

Further, it is possible to make the copyright control program P generate 
the third secret-key Ks3 in accordance with the second secret-key Ks2 using 
the copyright management program P: 

Ks3=P(Ks2) 

so that the data M is encrypted by the third secret-key Ks3 when the data is 
stored in secondary user terminal 5, copied to the recording medium 12, or 
supplied to tertiary user terminal 6 via communication network 8, 

It is further possible to make the secondary user present the secondary 
information Iu2 when requesting secondary utilization to the copyright 
management center 17 so that the third secret-key Ks3 is generated in 
accordance with the presented secondary user information Iu2 . 

In this embodiment 6, if the copyright control program P for generating 
the second secret-key Ks2 can be used in entire database system in common, 
the same second secret-key Ks2 is generated for the same original data in any 
database system as long as the primary user information Iul or the first secret- 
key Ksl is not changed. 
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[Embodiment 7] 

In embodiment 7, original data is encrypted and supplied in a one-way 
communication to a user from a single database and the user selects necessary 
data out of the original data to use it, similar to the embodiments 5 and 6. 
This embodiment uses a secret-key cryptosystem. 

In this embodiment a second secret-key is generated in accordance with 
the use frequency of a copyright control program and with a first secret-key. 

Because the system structure of embodiment 7 is the same as that of 
embodiments 5 and 6 shown in Figure 3, its description is omitted. 

The original data MO stored in database 1 is encrypted by the first secret- 
key Ksl via communication network 8, by broadcast waves via the satellite 2, 
or by the recording medium 3: 

CmOksl = E(Ksl,M0), 

and supplied to primary user terminal L 

A primary user obtaining the encrypted original data CmOksl makes a 
request for primary utilization of the original data MO to the copyright 
management center 17 from primary user terminal 4 by designating an 
original data name or original data number. 
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The copyright management center 17 receives the primary utilization 
request of the original data MO and transfers the first secret-key Ksl and the 
copyright control program P to primary user terminal 4. 

The copyright control program P includes a crypt program having a 
cryptographic algorithm, in which a crypt key is generated and data is 
decrypted or encrypted. Further, a counter is attached to the copyright control 
program P to count the use frequency of the program P. 

The primary user receives the first secret-key Ksl and the copyright 
control program P and decrypts the encrypted original data CmOksl by the first 
secret-key Ksl using the copyright control program P: 

MO * D(Ksl,CmOksl) 

to use the decrypted original data MO or data Ml as edited. 

When the data M serving as the original data MO or edited data Ml is 
stored in primary user terminal 4, copied to the recording medium 11, or 
transmitted to secondary user terminal 5 via communication network 8 in 
order to manage the copyright of data, the data is encrypted by the second 
secret-key Ks2 using the copyright control program P. The second secret-key 
Ks2 used for this operation is generated in accordance with the use frequency 
N of the copyright control program and with the first secret-key Ksl; 



56 



Ks2 = P(N + Ksl). 



Because the second secret-key Ks2 thus generated is based on the use 
frequency N of the copyright control program P and the first secret-key Ksl, 
the data M is encrypted by the latest second secret-key Ks2 whenever it is used: 

Cmks2==E(Ks2,M). 

The data Cmks2 encrypted by the second secret-key Ks2 generated 
through the final utilization is copied to the recording medium 11 or 
transmitted to secondary user terminal 5 via communication network 8 
together with its original data name or original data number and counter data 
NL 

The secondary user obtains the encrypted data Cmks2 and designates 
the original data name or original data number and the counter data Nl from 
secondary user terminal 5 to request the secondary utilization of the 
encrypted data Cmks2 to the copyright management center 17. 

The copyright management center 17 receives the secondary utilization 
request of the encrypted data Cmks2, finds out the first secret-key Ksl in 
accordance with the designated original data name or original data number, 
generates the second secret-key Ks2 in accordance with the counter data Nl 
and the first secret-key Ksl, and supplies the second secret-key Ks2 to 
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secondary user terminal 5 together with the copyright control program P via 
communication network 8. 

The secondary user receives the second secret-key Ks2, and the 
copyright control program P decrypts the encrypted data Cmks2 by the second 
secret-key Ks2 using the copyright control program P: 

M = D(Ks2, Cmks2) 

and uses the decrypted data M directly or by editing the data M. 

When the data M is stored in secondary user terminal 5, copied to the 
recording medium 12, or transmitted to tertiary user terminal 6 via 
communication network 8, the data M is encrypted by the second secret-key 
Ks2 using the copyright control program P: 

Cmks2 = E(ks2, M). 

In this case, it is also possible to make the copyright control program P 
generate the third secret-key Ks3 in accordance with a use frequency N2 of the 
copyright control program P in secondary user terminal 5 and with the secret- 
key Ks2: 

Ks3 = P(N2 + Ks2). 
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When the data M is stored in secondary user terminal 5, copied to the 
recording medium 12, or transmitted to the tertiary user 6 via 
communication network 8, the data M is encrypted by the third secret-key Ks3 
using the copyright control program P; 

Cmks3 - E(Ks3, M). 

[Embodiment 8] 

Figure 4 shows the embodiment 8 of the present data copyright 
management system. In this embodiment, original data is supplied one-way 
to a user from a single database in accordance with a request of the user. This 
embodiment uses a secret-key cryptosystem as its cryptosystem in which a 
second secret-key is generated in accordance with a first secret-key* 

In Figure 4, reference numeral 1 represents a database, 4 represents a 
primary user terminal, 5 represents a secondary user terminal, 6 represents a 
tertiary user terminal, and 7 represents an n-order user terminal. And 18 
represents a copyright management center and 8 represents a communication 
network such as a public telephone line provided by a telephone company or 
a CATV line offered by a cable television enterprise. 

In the above arrangement, database 1, copyright management center 18, 
primary user terminal 4, secondary user terminal 5, tertiary user terminal 6, 



59 



and n-order user terminal 7 can be connected with each other by- 
communication network 8. 

Each user who uses this system must previously be entered in a 
database system, and when entered in the system, database system software is 
given to the user. This software includes a normal communication software 
such as a data communication protocol. 

The database utilization software can be stored on a hard disk of a user 
terminal, or may be stored in a mask ROM, EPROM, or EEPROM in the user 
terminal. 

In this system, a secret-key generation algorithm is stored in a user 
terminal in order to generate a secret-key from the user side. However, 
because the secret-key generation algorithm is not always secret, it is possible 
to store the algorithm in the database utilization software given- to the user 
when the user is entered in a database system. 

In case of original data provided with advertisement supplied to the 
user free of charge, it may not be necessary to encrypt the data. Even in this 
case, however, because the data has a copyright, a proper procedure must be 
followed to ensure copyright protection. 

In Figure 4, the broken line represents a path for encrypted data, the 
solid line represents a path requested from each user terminal, and the one- 
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dot chain line represents a path through which a key for allowing data 
utilization and a copyright control program together with a secret-key from 
the copyright management center to secondary and subsequent-order user. 

In Figure 4, database 1 stores text data, graphics data or binary data, 
audio data, and picture data which are not encrypted. A primary user makes a 
request for utilization of the original data MO from primary user terminal 4 by 
designating an original data name or number to database 1 via 
communication network 8. 

Database 1 receives the utilization request of the original data MO from 
primary user terminal 4, encrypts the original data MO by the first secret-key 
Ksl: 

CmOksl = E(Ksl,MO) 

and supplies the copyright control program P to primary user terminal 4 
together with the encrypted original data CmOksl and the first secret-key Ksl. 

The copyright control program P includes a crypt program having a 
cryptographic algorithm which generates a secret-key and decrypts or encrypts 
data. Further, by making the cryptographic algorithm dependent on the first 
secret-key Ksl, it is possible to make the copyright control program P inherent 
in the original data MO. 
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Primary user terminal 4 receives the first secret-key Ksl and the 
copyright control program P together with the original data CmOksl encrypted 
by the first secret-key Ksl, decrypts the encrypted original data CmOksl by the 
first secret-key Ksl: 

MO = D(Ksl, CmOksl) 
and uses the decrypted original data MO directly or data Ml as edited. 

The copyright control program P generates the second secret-key Ks2 in 
accordance with the first secret-key Ksl: 

Ks2 = P(Ksl). 

When the data M as decrypted original data or edited data is stored in 
primary user terminal 4, copied to the recording medium 11, or- transmitted 
to secondary user terminal 5 via communication network 8, the data M is 
encrypted by the second secret-key Ks2 using the copyright control program P: 

Cmks2 = E(Ks2, M). 

The encrypted data Cmks2 is copied to the recording medium 11 or 
transmitted to secondary user terminal 5 via communication network 8, 
together with its original data name or original data number. 
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A secondary user obtains the encrypted data Cmks2 and makes a 
request for secondary utilization of the data M as original data or edited data 
to the copyright management center 18 from secondary user terminal 5 by 
designating the original data name or number. 

The secondary copyright management center 18 receives the secondary 
utilization request of the data M, finds out the first secret-key Ksl in 
accordance with the original data name or original data number to generate 
the second secret-key Ks2 in accordance with the first secret-key Ksl: 

Ks2 = P(Ksl) 

and supplies the generated second secret-key Ks2 to secondary user terminal 5 
together with the copyright control program R 

Secondary user terminal 5 receives the second secret-key Ks2 and the 
copyright control program P y decrypts the encrypted data Cmks2 by the second 
secret-key Ks2 using the copyright control program P: 

M = D(Ks2, Cmks2) 

and uses the decrypted data M directly or by editing it. 

A third secret-key Ks3 is generated by the copyright control program P 
in accordance with the second secret-key Ks2: 
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Ks3 = P(Ks2) 



so that the data M is encrypted by the generated third secret-key Ks3 using the 
copyright control program P when the data M is stored in secondary user 
terminal 5, copied to the recording medium 12, or transmitted to tertiary user 
terminal 6 via communication network 8: 

Cmks3 = E(Ks3 / M). 

[Embodiment 9] 

In embodiment 9, original data is supplied to a user from a single 
database in accordance with a request of the user, similarly to embodiment 8 
in Figure 4. This embodiment uses a secret-key cryptosystem and user data in 
addition to the first secret-key used for embodiment 8 to generate a second 
secret-key. 

Because the system structure of this embodiment is the same as that of 
embodiment 8, its description is omitted. 

Database 1 stores the original data MO which is not encrypted. When a 
primary user accesses database 1 from primary user terminal 4, a data menu is 
transferred to the user. In this case, it is possible to display charge 
information together with the data menu. 
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When the primary user receives the data menu, the user retrieves the 
data menu to select the original data MO and requests primary utilization of 
the original data MO to database 1 by designating the original data name or the 
like of the selected original data MO. 

In database 1 receiving the utilization request of the original data MO 
from primary user terminal 4, the original data MO is read and the original 
data MO is encrypted by the first secret-key Ksl: 

CmOksl = E(Ksl, MO) 

and the copyright control program P is supplied to primary user terminal 4 
together with the encrypted original data CmOksl and the first secret-key Ksl. 

The copyright control program P used here is common to entire 
database system, which includes a crypt program having a cryptographic 
algorithm. A crypt key is generated and data is decrypted or encrypted by this 
crypt program. 

Primary user terminal 4 receives the first secret-key Ksl and the 
copyright control program P, decrypts the encrypted original data CmOksl by 
the first secret-key Ksl using the copyright control program P; 
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MO = D(Ksl, CmOksl) 



and uses the decrypted original data MO or data Ml as edited. 

The copyright control program P generates the second secret-key Ks2 in 
accordance with a primary user information Iul: 

Ks2 = P(Iul). 

The second secret-key Ks2 may be generated in accordance with the first 
secret-key Ksl or the primary user data Iul and the first secret-key Ksl instead 
of the primary user information Iul: 

Ks2 = P(Ksl) 

Ks2 = P(Ksl+Iul). 

When the data M serving as the original data MO or edited data Ml is 
stored in Primary user terminal 4, copied to the recording medium 11, or 
transmitted to secondary user terminal 5 via communication network 8, the 
data M is encrypted by the second secret-key Ks2 using the copyright control 
program P: 

Cmks2 = E(Ks2, M). 
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The data Cmks2 encrypted by the second secret-key Ks2 is provided 
with the original data name or original data number and then, copied to the 
recording medium 11 or transmitted to secondary user terminal 5 via 
communication network 8. 

A secondary user obtains the data Cmks2 encrypted by the second 
secret-key Ks2 and makes a request for secondary utilization, of the data M to 
the copyright management center 18 from secondary user terminal 5. The 
user designates the original data name or original data number and presents 
the uncrypted primary user information Iul. 

The copyright management center 18 receives the secondary utilization 
request of the data M, finds out the first secret-key Ksl in accordance with the 
designated original data name or original data number, generates the second 
secret-key Ks2 in accordance with the presented primary user information Iul 
and the found-out first secret-key Ksl by the copyright control program P, and 
supplies the key Ks2 to secondary user terminal 5 together with the copyright 
control program P* 

The secondary user obtains the second secret-key Ks2 and the copyright 
control program P, decrypts the encrypted data Cmks2 by the second secret-key 
Ks2 using the copyright control program P in secondary user terminal 5: 

M = D(Ks2, Cmks2) 
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and uses the decrypted data M directly or by editing the data. 

When the data M is stored in secondary user terminal 5, copied to the 
recording medium 12, or transmitted to tertiary user terminal 6 via 
communication network 8, the data M is encrypted by the second secret-key 
Ks2 using the copyright control program P: 

Cmks2 = E(Ks2, M). 

In this case, it is also possible to make the copyright control program P 
generate the third secret-key Ks3 in accordance with the primary user 
information Iul, second secret-key Ks2, or primary user information Iul and 
the second secret-key Ks2, 

Ks3=P(Iul) 

Ks3 = P(IuUKsl) 

Ks3 = P(Ksl). 

It is also possible to make the secondary user present the secondary user 
information Iu2 when requesting secondary utilization so that the third 
secret-key is generated in accordance with the secondary user information Iu2 
instead of the primary user information Iul. 
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The data M is encrypted by the third secret-key Ks3 using the copyright 
control program P: 

Cmks=E(Ks3, MX 

In this embodiment, the copyright control program P for generating the 
second secret-key Ks2 is common to any database. Therefore, in any database, 
the same second secret-key Ks2 is generated for the same original data as long 
as the primary user data Iul and the first secret-key Ksl are not changed. 

[Embodiment 10] 

In embodiment 10, original data is supplied to a user from a single 
database in accordance with a request of the user similarly to the case of 
embodiment 8* This embodiment uses a secret-key cryptosystem. 

This embodiment uses the use frequency of a copyright control 
program instead of user information adopted for generating a second secret- 
key in embodiment 9. 

Because the system structure of this embodiment is the same as that of 
embodiment 8, its description is omitted. 

Database 1 stores original data MO which is not encrypted. When a 
primary user accesses database 1 from primary user terminal 4, a data menu is 
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transferred to the user. In this case, charge information may be displayed 
together with the data menu. 

When the primary user receives the data menu, the user retrieves the 
data menu to select the original data MO and makes a request for the primary 
utilization of the original data MO to database 1 by designating an original data 
name or the like via communication network 8 from primary user terminal 
4 

Database 1 receives the data utilization request from a primary user, 
encrypts the original data MO by a first secret-key Ksl 

CmOksl=E(Ksl,MO) 

and supplies the copyright control program P to primary user terminal 4 
together with the encrypted data CmOksl and the first secret-key- Ksl. 

The copyright control program P includes a crypt program having a 
cryptographic algorithm, which generates a crypt key and decrypts or encrypts 
data. Further, a counter is attached to the copyright control program P to 
count the use frequency N of the program P or the number of use times of 
original data. 
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Further, by making the cryptographic algorithm dependent on the first 
secret-key Ksl, it is possible to make the copyright control program P inherent 
in the original data. 

The primary user receives the first secret-key Ksl and the copyright 
control program P, decrypts the encrypted original data CmOksl by the first 
secret-key Ksl using the copyright control program P 

MO = D(Ksl, CmOksl) 

and uses the decrypted original data MO directly or data Ml as edited* 

To protect the copyright of data, when the data M as the original data 
MO or edited data Ml is stored in primary user terminal 4, copied to the 
recording medium 11, or transmitted to secondary user terminal 5 via 
communication network 8, the data M is encrypted by the copyright control 
program P. In other words, a copyright control program always runs 
whenever these types of utilization are made. 

When the supplied copyright control program P is used, the counter in 
the program performs counting and the copyright control program P 
generates the second secret-key Ks2 in accordance with the counted value N 
and the first secret-key Ksl: 

Ks2 = P(N + Ks2X 
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Because the second secret-key Ks2 is based on the use frequency N of 
the copyright control program P, the data M is encrypted by the new second 
secret-key Ks2 whenever the data is used: 

Cmks2 = E(Ks2, M). 

The data Cmks2 encrypted by the generated second secret-key Ks2 is 
copied to the recording medium 11 or transmitted to secondary user terminal 
5 via communication network 8 together with the original data name or 
original data number, the primary user information Iul and the counter data 
N. 

A secondary user obtains the data Cmks2 encrypted by the second 
secret-key Ks2 and designates the original data name or original data number, 
primary user information Iul, and counter data N to request secondary 
utilization of the data M to the copyright management center 18: 

The copyright management center 18 receives the secondary utilization 
request of the encrypted data Cmks2, finds out the first secret-key Ksl in 
accordance with the original data name or original data number of the data, 
generates a second secret-key Ks2 according to the first secret-key Ksl, and the 
presented primary user information Iul and the counter data N, and transfers 
the generated second secret-key Ks2 to secondary user terminal 5 together 
with the copyright control program P. 
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Secondary user terminal 5 receives the second secret-key Ks2 and the 
copyright control program P, decrypts the encrypted data Cmks2 by the second 
secret-key Ks2 using the copyright control program P; 

M « D(Ks2, Cmks2) 

and uses the decrypted data M directly or by editing the data. 

When the data is stored in secondary user terminal 5, copied to the 
recording medium 12, or transmitted to tertiary user terminal 6 via 
communication network 8, the data is encrypted by the second secret-key 
using the copyright control program P. Further, it is possible that the 
copyright control program generates a third secret-key in accordance with the 
second secret-key. 

Above-mentioned embodiments 1 to 10 are described with respect to 
using a single original data supplied from a database. However, one of the 
data utilization, edit operation, includes not only editing a single data but also 
producing new data by combining a plurality of original data obtained from 
the same database and producing new data by combining a plurality of 
original data obtained from a plurality of databases. 

[Embodiment 11] 
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In embodiment 11, a primary user produces new data by combining a 
plurality of original data stored in a single database. That is, the primary user 
produces new data by using first, second, and third original data stored in the 
database. In this embodiment, a plurality of original data are supplied to a 
user from a single database in response to a request of the user similarly to the 
case of embodiment 8 shown in Figure 4. This embodiment uses a secret-key 
cryptosystem. 

Because the system structure of this embodiment is the same as that of 
embodiment 8, its description is omitted. 

Database 1 stores original data M01, M02 and M03 which are not 
encrypted. When the primary user accesses database 1 from primary user 
terminal 4, a data menu is transferred to the user. In this case, charge 
information may be displayed together with the data menu. 

When the primary user receives the data menu, the user retrieves the 
data menu to select the original data M01, M02 and M03, makes a request for 
supply of the data M01, M02 and M03 to database 1 via communication 
network 8 by designating original data names or original data numbers of the 
first, second and third original data M01, M02 and M03, and also presents the 
primary user information Iul. 

Database 1 receives the supply request of the first, second and third 
original data M01, M02 and M03 from the primary user, encrypts the first, 



74 



second and third original data MOl, M02 and M03 by first, second and third 
secret-keys KsOl, Ks02 and Ks03 respectively: 

CmOlksOl = E(Ks01, MOl) 

Cm02ks02 = E(Ks02, M02) 

Cm03ks03 = E(Ks03, M03) 

and supplies the first, second and third secret-keys KsOl, Ks02 and Ks03 and 
the copyright control program P common to entire database and all original 
data to primary user terminal 4. 

The copyright control program P incudes a crypt program having a 
cryptographic algorithm, which generates a crypt key and decrypts or encrypts 
data. 

Primary user terminal 4 receives the first encrypted original data 
CmOlksOl, second encrypted original data Cm02ks02, third encrypted original 
data Cm03ks03, first secret-key KsOl, second secret-key Ks02, third secret-key 
Ks03, and copyright control program P, decrypts the first, second and third 
encrypted original data CmOlksOl, Cm02ks02 and Cm03ks03 by the secret-keys 
KsOl, Ks02, and Ks03 using the copyright control program P: 

MOl =D(Ks01, CmOlksOl) 
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M02 = D(Ks02, Cm02ks02) 

M03 = D(Ks03, Cm03ks03) 

and produces new data Ml edited from the original data M01, M02 and M03. 

The copyright control program P produces a fourth secret-key Ks4 in 
accordance with one or some of the first secret-key KsOl, second secret-key 
Ks2, third secret-key Ks3, and primary user data Iul: 

Ks4 = P(Ks01/Ks02/Ks03/Iul). 

When the edited data Ml is stored in primary user terminal 4, copied to 
the recording medium 11, or transmitted to secondary user terminal 5 via 
communication network 8, the data is encrypted by the fourth secret-key Ks4 
using the copyright control program P: 

Cmlks4 « E(Ks4, Ml), 

The encrypted edited data Cmlks4 is copied to the recording medium 
11 or transmitted to secondary user terminal 5 via communication network 8, 
together with original data names or original data numbers and the primary 
user data Iul. 
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A secondary user obtains the encrypted edited data Cmlks4 and makes 
a request for secondary utilization of the data Cmlks4 to the copyright 
management center 18 from secondary user terminal 5. In this case, the user 
designates data names or data numbers of the original data M01, M02 and 
M03 and presents the primary user information Iul. 

The copyright management center 18 receives the secondary utilization 
request of the encrypted edited data Cmlks4 from the secondary user, finds 
out the first secret-key KsOl in accordance with the data name or data number 
of the first original data M01, the second secret-key Ks02 in accordance with 
the data name or number of the second original data M02, and the third 
secret-key Ks03 in accordance with the data name or number of the third 
original data M03, generates fourth secret-key Ks4 by one or some of the 
found-out first secret-key KsOl, second secret-key Ks02, third secret-key Ks03 
and primary user information Iul using common copyright control program 
P: 

Ks4 = P(Ks01/Ks02/Ks03/Iul); 

and supplies the fourth secret-key Ks4 to secondary user terminal 5 together 
with the common copyright control program P. 

The secondary user receives the fourth secret-key Ks4 and the common 
copyright control program P, decrypts the encrypted edited data Cmlks4 by the 
fourth secret-key Ks4 using the copyright control program P 
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Ml = D(Ks4, Cmlks4) 
and uses the decrypted edited data Ml directly or data M2 as edited. 

When the edited data Ml or re-edited data M2 is stored in secondary 
user terminal 5, copied to the recording medium 12 or transmitted to a 
tertiary user terminal 6 via communication network 8, a fifth secret-key Ks5 is 
generated in accordance with the fourth secret-key Ks4 by the copyright 
control program P, and the data is encrypted by the fifth secret-key Ks5 using 
the copyright control program P: 

Cmlks5 = E(Ks5, Cml) 
Cm2ks5 = E(Ks5, Cm2). 

Further, it is possible to make the common copyright control program 
P generate a fifth secret-key Ks5 by the fourth secret-key Ks4 for subsequent 
encryption or decryption by the generated fifth secret-key Ks5. 

In this embodiment, a copyright control program for generating a 
fourth secret-key is common to any database. Therefore, in any database, the 
same fourth secret-key is generated for the same original data as long as 
primary user data and a first secret-key are not changed. 
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While the common copyright control program of this embodiment is 
supplied from the copyright management center 18, it may be stored in a 
ROM in a user terminal or in software for using a database. 

[Embodiment 12] 

In embodiment 12, new data is produced by combining a plurality of 
original data supplied from a plurality of databases in response to a user's 
request. This embodiment uses a secret-key cryptosystem. 

In Figure 5, reference numerals 19, 20, and 21 represent first, second 
and third databases storing text data, binary data as a computer graphics 
display or computer program, and audio data or picture data, 4 represents a 
primary user terminal, 5 represents a secondary user terminal, 6 represents a 
tertiary user terminal, 7 represents an n-order user terminal, 10 represents a 
copyright management center for managing data copyrights, and 8 represents 
a communication network such as a public telephone line offered by a 
telephone company or a CATV line offered by a cable television enterprise. 

In the above arrangement, the first, second and third databases 19, 20 
and 21, copyright management center 10, primary user terminal 4, secondary 
user terminal 5, tertiary user terminal 6, and n-order user terminal 7 can be 
connected with each other by communication network 8. 
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A user who desires to use this system must previously be entered in 
each database system, and when entered in the database system, database 
utilization software is supplied to the user. The software includes a normal 
communication software program such as a data communication protocol. 

The database utilization software may be stored on a hard disk of a user 
terminal, or may be stored in a mask ROM, EPROM, or EEPROM in the user 
terminal. 

In this system, a crypt key generation algorithm is stored in a user 
terminal in order to generate a secret-key from the user side. However, 
because the crypt key generation algorithm is not necessarily secret, it is 
possible to store the algorithm in each database utilization software. 

In case of original data provided with advertisement supplied to the 
user free of charge, it may not be necessary to encrypt the data. Even in this 
case, however, because the data has a copyright, a proper procedure must be 
followed to ensure copyright protection. 

In Figure 5, the broken line represents a path for encrypted data, the 
solid line represents a path of requests from each user terminal to each 
database and copyright management center, and the one-dot chain line 
represents a path through which permit information corresponding to 
utilization requests, a copyright control program, and a crypt key are 
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transferred from each database and copyright management center to each user 
terminal. 

This embodiment uses a secret-key and a copyright control program 
which are different for each original data and are previously stored in each 
database and the copyright management center. 

The first database 19 stores the first original data Ml which is not 
encrypted. When a primary user accesses the first database 19 from the first 
user terminal 4, a data menu is transferred to the user. 

When the primary user receives the data menu, the user retrieves the 
data menu to select the first original data Ml and makes a request for supply 
of the first original data Ml to the first database 19 via communication 
network 8 from primary user terminal 4 by designating an original data name 
or original data number. In this case, the user presents the primary user 
information Iul. 

The first database 19 receives the utilization request of the first original 
data Ml from the primary user, encrypts the requested first original data Ml 
by first secret-key Ksl 

Cmlksl=E(Ksl,Ml) 
and supplies the encrypted data to primary user terminal 4. 
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The second database 20 stores the second original data M2 which is not 
encrypted. When the primary user accesses the second database 20 from 
primary user terminal 4, a data menu is transferred to the user. 

When the primary user receives the data menu, the user retrieves the 
data menu to select the second original data M2 and makes a request for 
supply of the second original data M2 to the second database 20 via 
communication network 8 from primary user terminal 4 by designating an 
original data name or original data number. In this time, the user presents 
the primary user information Iul. 

The second database 20 receives the utilization request of the second 
original data M2 from the primary user, encrypts the requested second 
original data M2 by second secret-key Ks2 

Cm2ks2 = E(Ks2,M2) 

and supplies the encrypted data to primary user terminal 4. 

The third database 21 stores the third original data M3 which is not 
encrypted. When the primary user accesses the third database 21 from 
primary user terminal 4, a data menu is transferred to the user. 
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When the primary user receives the data menu, the user retrieves the 
data menu to select the third original data M3 and requests for supply of the 
third original data M3 to the third database 21 via communication network 8 
from primary user terminal 4 by designating an original data name or 
original data number. In this case, the user presents the primary user 
information Iul. 

The third database 21 receives the utilization request of the third 
original data M3 from the primary user, encrypts the requested third original 
data M3 by the third secret-key Ks3 

Cm3ks3 = E(ks3, M3) 

and supplies the encrypted data to primary user terminal 4. 

The primary user receives the first, second, and third encrypted original 
data Cmlksl, Cm2ks2 and Cm3ks3 makes a request for primary utilization of 
the first, second, and third encrypted original data Cmlksl, Cm2ks2 and 
Cm3ks3 to copyright management center 10 via communication network 8 
from primary user terminal 4 by designating original data names or numbers. 

Copyright management center 10 receives the primary utilization 
request of the first, second and third encrypted original data Cmlksl, Cm2ks2 
and Cm3ks3 from the primary user and supplies a first copyright control 
program PI, a second copyright control program P2, and a third copyright 
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control program P3 to primary user terminal 4 together with the first secret- 
key Ksl as a crypt key of the first original data Ml, the second secret-key Ks2 as 
a crypt key of the second original data M2, and the third secret-key Ks3 as a 
crypt key of the third original data M3. 

These copyright control programs PI, P2 and P3 include a crypt program 
having a cryptographic algorithm respectively, which generates new secret- 
keys and decrypts or encrypts data. 

Further, by making these cryptographic algorithms dependent on the 
first, second and third secret-keys Ksl, Ks2 and Ks3 respectively, it is possible 
to make the first, second and third copyright control programs PI, P2 and P3 
inherent in the first, second and third original data Ml, M2 and M3 
respectively. 

Primary user terminal 4 receives the first, second and third secret-keys 
Ksl, Ks2 and Ks3, decrypts the first, second and third original data Cmlksl, 
Cm2ks2 and Cm3ks3 encrypted by these secret-keys: 

Ml = D(Ksl, Cmlksl) 

M2 = D(Ks2, Cm2ks2) 

M3 = D(Ks3, Cm3ks3) 
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and uses the decrypted original data Ml, M2, and M3 directly or by editing 
them. 

And the first copyright control program PI generates fourth secret-key 
Ks4 in accordance with the first secret-key Ksl, the second copyright control 
program P2 generates fifth secret-key Ks5 in accordance with the second, 
secret-key Ks2, and the third copyright control program P3 generates sixth 
secret-key Ks6 in accordance with the third secret-key Ks3: 

Ks4 = Pl(Ksl) 

Ks5 = P2(Ks2) 

Ks6 = P3(Ks3). 

When the original data Ml, M2 and M3 or edited data M4, M5 and M6 
are stored in primary user terminal 4, copied to the recording medium 11, or 
transmitted to secondary user terminal 5 via communication network 8; the 
first original data Ml or edited data M4 is encrypted by the fourth secret-key 
Ks4 using the first copyright control program PI, the second original data M2 
or edited data M5 is encrypted by the fifth secret-key Ks5 using the second 
copyright management program P2, and the third original data M3 or edited 
data M6 is encrypted by the sixth secret-key Ks6 using the third copyright 
control program P3: 
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Cmlks4 = E(Ks4, Ml) 



Cm2ks5 = E(Ks5, M2) 
Cm3ks6 = E(Ks6,M3) 
Cm4ks4 = E(Ks4 / M4) 
Cm5ks5 = E(Ks5 / M5) 
Cm6ks6 = E(Ks6, M6). 

The original data Cmlks4, Cm2ks5 and Cm3ks6 or edited data Cm4ks4, 
Cm5ks5 and Cm6ks6 encrypted by the fourth, fifth and sixth secret-keys Ks4, 
Ks5 and Ks6 are copied to the recording medium 11 or transmitted to 
secondary user terminal 5 via communication network 8 together with the 
first, second and third original data names or original data numbers and the 
primary user data Iul. 

For secondary user terminal 5 receiving the first, second and third 
encrypted original data Cmlks4, Cm2ks5 and Cm3ks6 or the encrypted edited 
data Cm4ks4, Cm5ks5 and Cm6ks6, secondary utilization of the first, second 
and third original data Ml, M2 and M3 or edited data M4, M5 and M6 is 
requested to copyright management center 10 by designating the original data 
names or original data numbers. 
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Copyright management center 10 receives the secondary utilization 
request of the first, second and third original data Ml, M2 and M3 or the 
edited data M4, M5 and M6 from secondary user terminal 5 and finds out the 
first secret-key Ksl and the first copyright control program PI in accordance 
with the first original data name or number, the second secret-key Ks2 and 
the second copyright control program P2 in accordance with the second 
original data name or number and the third secret-key Ks3 and the third 
copyright control program P3 in accordance with the third original data name 
or number, wherein the first copyright control program PI generates the 
fourth secret-key Ks4 from the first secret-key Ksl, the second copyright 
control program P2 generates the fifth secret-key Ks5 from the second secret- 
key Ks2 and the third copyright control program P3 generates the sixth secret- 
key Ks6 from the third secret-key Ks3: 

Ks4 = Pl(Ksl) 

Ks5 = P2(Ks2) 

Ks6=P3(Ks3); 

Copyright management center 10 supplies these secret-keys to 
secondary user terminal 5 together with the first, second and third copyright 
control programs PI, P2 and P3. 
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In secondary user terminal 5 receiving the fourth, fifth and sixth secret- 
keys Ks4, Ks5 and Ks6 and the first, second and third copyright control 
programs PI, P2 and P3, the encrypted first original data Cmlks4 or edited data 
Cm4ks4 is decrypted by the fourth secret-key Ks4 using the first copyright 
control program PI, the encrypted second original data Cm2ks5 or edited data 
Cm5ks5 is decrypted by the fifth secret-key Ks5 using the second copyright 
control program P2, and the encrypted third original data Cm3ks6 or edited 
data Cm6ks6 is decrypted by the sixth secret-key Ks6 using the third copyright 
control program P3: 

M4 = D(Ks4, Cmks4) 

M5 = D(Ks5, Cm5ks5) 

M6 = EKKs6, Cm6ks6) 

and the decrypted data M4, M5 and M6 are used directly or by editing them. 

When the first, second and third original data Ml, M2 and M3 or edited 
data M4, M5 and M6 are stored in secondary user terminal 5, copied to the 
recording medium 12, or transmitted to tertiary user terminal 6 via 
communication network 8, the first original data Ml or edited data M4 is 
encrypted by the fourth secret-key Ks4 using the first copyright control 
program PI, the second original data M02 or edited data M5 is encrypted by 
the fifth secret-key Ks5 using the second copyright control program P2, and 
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the third original data M3 or edited data M6 is encrypted by the sixth secret- 
key Ks6 using the third copyright control program P3. 

In this case, it is also possible to make the first copyright control 
program PI generate a seventh secret-key Ks7 in accordance with the fourth 
secret-key Ks4, the second copyright control program P2 generate an eighth 
secret-key Ks8 in accordance with the fifth secret-key Ks5 and the third 
copyright control program P3 generate a ninth secret-key Ks9 in accordance 
with the sixth secret-key Ks6: 

Ks7 = Pl(Ks4) 

Ks8 = P2(Ks5) 

Ks9 = P3(Ks6) 

When the first, second and third original data Ml, M2 and M3 or edited 
data M4, M5 and M6 are stored in secondary user terminal 5, copied to the 
recording medium 12, or transmitted to terdary user terminal 6 via 
communication network 8, the first, second and third copyright control 
programs PI, P2 and P3 encrypt the first, second and third original data Ml, 
M2 and M3 or the edited data M4, M5 and M6 by the seventh, eighth and 
ninth secret-keys Ks7, Ks8 and Ks9: 

Cmlks7 = E(Ks7,Ml) 
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Cm2ks8 = E(Ks9, M2) 
Cm3ks9 = E(Ks9, M3) 
Cm4ks7 = E(Ks7,M4) 
Cm5ks8 = E(Ks8, M5) 
Cm6ks9 = E(Ks9,M6) 

[Embodiment 13] 

In embodiment 13, new data is produced by using a plurality of original 
data supplied from a plurality of databases in response to a user's request, 
similar to embodiment 12. This embodiment uses a secret-key cryptosystem. 

The use frequency of copyright control programs is used to generate a 
crypt key for encryption/ decryption, similar to the embodiments 7 and 11. 

In this embodiment, a counter is attached to a copyright control 
program, which counts the service frequency of the program or the number 
of times of using original data. The fourth, fifth and sixth secret-keys Ks4, Ks5 
and Ks6 are generated by the counter value N. 
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A secondary user presents the counter value N together with the 
original data name or original data number of each original data and primary 
user data to request secondary utilization of data to copyright management 
center 10* 

Copyright management center 10 receives the secondary utilization 
request of data, finds out the first, second and third secret-keys Ksl, Ks2 and 
Ks3 in accordance with the original data names or original data numbers, 
generates fourth, fifth and sixth secret-keys Ks4, Ks5 and Ks6 by the first, 
second and third secret-keys Ksl, Ks2 and Ks3 for each data, the primary user 
information Iul and the first, second and third counter values Nl, N2 and N3 
using the first, second and third copyright control programs PI, P2 and P3, and 
supplies the generated fourth, fifth and sixth secret-keys Ks4, Ks5 and Ks6 to 
secondary user together with the fourth, fifth and sixth copyright control 
programs PI, P2 and P3. 

Because the system structure of embodiment 13 is the same as that of 
embodiment 12 except the above point, its detailed description is omitted. 

[Embodiment 14] 

When a copy of original data obtained by a primary user is directly 
supplied to a secondary user, a copyright of the primary user is not affected on 
the data because the data is not provided with any value. However, when 
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new data is produced from obtained original data, that is, when new data is 
produced from single original data or from a plurality of original data, a 
secondary copyright of the primary user; i.e v secondary exploitation right in 
editing the data is affected on the new data. 

Because the copyright of the original copyright owner also applies for 
the original data used for edit, the original copyright of the original data of an 
author and the secondary copyright of the primary user who has edited data 
apply for the edited data. 

As a copyright is a right having essential elements of a personal right, 
authors strongly insist on owning the copyright in many cases. Therefore, 
even when original data is edited, it is preferable that the original data or its 
copyright owner can easily be specified from the edited data. 

In the data copyright management systems described in embodiments 1 
to 13, the copyrights of data are managed by encrypting original data or edited 
data. For these systems, however, the copyright of data is managed without 
identifying original data or edited data, in the whole data or separating an 
original data part from an edited part in the whole edited data. Therefore, it is 
impossible to specify original data or owner from edited data. 

Embodiment 14 makes it possible to separate original data for which 
only the original copyright applies from the edited data in which a secondary 
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exploitation right also applies in addition to the original copyright, and 
manage the original copyright and the secondary exploitation right. 

Because data is edited by using an editor program, thereby altering 
original data, the edited data can be reproduced as the. original data and edit 
contents (further, the editor program when necessary) are specified. In other 
words, unless the original data and the edit contents (further, the editor 
program when necessary) are specified, it is impossible to reproduce the 
edited data. 

In embodiment 14, the secondary exploitation right described is 
managed by specifying original data and edit contents (further, an editor 
program when necessary) and managing them. 

To produce new data from single original data, there can be different 
cases: first, edited data [A'] is obtained by altering original data A; second, 
edited data [A+X] is obtained by adding data X to the original data A by a 
primary user; third, edited data [A"] is obtained by dividing the original data 
A into original data elements Al, A2, A3,... and changing the arrangement of 
the elements to such as A3, A2 and Al; and fourth, edited data 
[A1+X1+A2+X2+A3+X3...] is obtained by dividing the original data A into 
original data elements Al, A2, A3,...., also dividing the data X of the primary 
user into XI, X2, X3,... and arranging these elements. 
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In these cases, alteration of original data, change of original data 
arrangement, combination of the original data with primary user data, and 
division of the original data and combination of it with the primary user data 
can respectively be provided with a secondary exploitation right, which needs 
to be protected. The original copyright of the primary user, of course, is 
retained in the data X added by the primary user. 

To produce new data by combining a plurality of original data, there are 
different methods: first, edited data [A+B+C] is obtained by simply 
combining original data A, B, C,...; second, edited data such as [A+X] is 
obtained by adding data X to the original data A, B, C, third, edited data 
[A1+B1+C1+...+A2+B2+C2+...+A3+B3+C3+...] is obtained by dividing the 
original data A, B, C,... into original data elements Al, A2, A3,..., Bl, B2, B3,..., 
and CI, C2, C3,..., combining them, and changing their arrangements; and 
fourth, edited data [A1+B1+C1+X1+...+A2+B2+C2+X2+...+A3+B3+C3+X3+...] 
is obtained by dividing the original data A, B, C,... into original data elements 
Al, A2, A3,..., Bl, B2, B3,..., and CI, C2, C3,..., combining the elements with 
primary user data X1,X2, X3,..., and changing their arrangements. 

Also in these cases, combination of a plurality of original data, 
combination of a plurality of original data with primary user data, division of 
a plurality of original data and change of the arrangements, and combination 
of a plurality of divided original data with the primary user data can 
respectively be provided with a secondary exploitation right, which needs to 
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be protected. Also, the original copyright of the primary user, of course, is 
retained in the data XI, X2, X3,~. added by the primary user. 

Figure 6 shows an example for producing new data D by using a 
plurality of original data A, B and C This method is known as the cut-and- 
paste technique in which data is edited by extracting (cutting out) elements 
"a", "b" and "c" from original data A, B and C and attaching (pasting) the 
extracted elements "a", "b" and M c" to form a piece of data D. 

While it is clear that original data and primary user data are data, the 
editing process: alteration of original data, arrangement change of original 
data, combination of original data with primary user data, division of original 
data and combination with primary user data, combination of a plurality of 
original data each other, combination of a plurality of original data with 
primary user data, division and arrangement change of a plurality of original 
data, and combination of a plurality of divided original data with primary 
user data, are also data. 

In the above described embodiments 1 to 13, the copyright of data are 
managed by encrypting original data or edited data. Further, noticing that 
editing process of data, such as arrangement of original data and process of 
editing, is also data, the secondary exploitation right on edited data can be 
protected by managing the primary copyright of the author on the original 
data and secondary copyright of the primary user on editing process data. 
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Editing process data or editor program may be called as scenario. That 
is, it is possible to ensure to manage the copyrights of the edited data as well as 
of the original data, if the edited data is constituted with original data, 
primary user data and editing process data, and thus, these original data, 
primary user data and editing process data are managed by the data copyright 
management system described in embodiments 1 to 13. In this case, an editor 
program used for editing data may be managed by the data copyright 
management system, if necessary. 

While the data edit operation of original data can be performed by 
using an editor program corresponding to the original data, by handling the 
original data as object-oriented software which has recently been focused on, 
it is possible to facilitate further editing of data and manage more preferably 
copyrights of data. 

Further, by adopting agent-oriented software, a user can synthesize data 
with little labor. The agent-oriented software, unlike the conventional one, is 
a program having autonomy, flexibility and cooperativeness, which is able to 
meet a user f s request with its characteristics of autonomy, flexibility and 
cooperativeness in accordance with only a general instruction of the user 
without specifically giving every operation instructions to the software. 

By incorporating the agent program into a basic system of a data 
copyright management system so that the program monitors the database 
utilization of a user and information obtained through the monitoring is 
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collected at the database or the copyright management center, it is possible to 
monitor the database utilizadon condition of the user at the database side or 
the copyright management center side and achieve more accurate copyright 
management. As described, these agent program and data can also be 
protected and, therefore, are encrypted like original data. 

[Embodiment 15] 

The works with a copyright include those which make use of the 
copyright and those which do not make use of the copyright. The works with 
no copyright include those to which no copyright is given by a law and those 
whose copyright duration has expired. All works except those which have no 
existing copyright have a copyright, and they are normally provided with a 
mark for indicating the copyright which prevents infringement of the 
copyright. 

The same is applied to data. In case of data with a copyright, indication 
of a copyright or an author mark is given to the data to be used or to the file 
header of the data in order to prevent the infringement of the copyright. 

Further, by adding the copyright flag indicative of the data with 
copyright to the file, and by identifying the copyright flag in the user terminal, 
it is possible to prevent the infringement of the data copyright. 
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However, even if the indication on a copyright is given to data, when a 
user disregards the copyright of the data work, that results in the 
infringement of the copyright. To prevent the above case, in the above 
mentioned embodiments, data is encrypted and a decryption key for 
decrypting the encrypted data is managed so as to perform encryption or 
decryption by a crypt key different from the decryption key when decrypted 
data is stored, copied, or transmitted. 

Even in this case, there may be the possibility of storing, copying, or 
transferring data without using a cryptographic key different from a 
decryption key by transferring the data to a memory other than the main 
memory of a user terminal while the data is present in the main memory of 
the user terminal. 

To prevent the above case, it is the best to incorporate data copyright 
utilization software into a basic system of a user terminal, indicate the file of a 
data work to which a copyright is given with an attribute for making use of 
the copyright, make the basic system of the user terminal monitor the 
attribute for using the copyright of the data work, and make the data copyright 
utilization software manage the data work having the copyright using 
attributes. 

The basic system means a software operating system such as DOS when 
the user terminal is a computer such as a personal computer or a hardware 
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operating system stored in a ROM when the user terminal is a portable 
information terminal or STB (set top box). 

To more completely manage a data copyright with the operating 
system, it is preferable to incorporate the data copyright utilization software 
into a higher-level operating system. 

Every processing and every data in the user terminal is under control 
of an operating system. In other words, the operating system can store every 
processing and data information in the user terminal. Therefore, it is possible 
to make the copyright control program automatically manage the data 
copyright in accordance with a data utilization condition held by the 
operating system without resorting to a user instruction. According to the 
above arrangement, a user can easily use a data copyright and the data 
copyright can more completely be managed. 

Further, it is desirable that the copyright control program for managing 
the crypt key, data copyright information, the copyright label or the like is 
kept in a system area controlled by the operating system itself; i.e., the system 
area the user program cannot access. 

Even in this case, however, if part of a data work is extracted and used, 
it is difficult to manage the data copyright Therefore, when an operating 
system detects such a situation, it is possible to manage the copyright of the 
extracted part of the data by configuring a system so as to add copyright 
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information and the copyright using attributes owned by original data to the 
extracted part of the data by the copyright control program. 

Further, to allow the extracted data to inherit the copyright of the 
original data work, a "has-a" link, which is a parent and child relationship, is 
formed between the extracted data and the original data work with the 
copyright control program. 

With such a configuration, it is possible to allow the new data to 
inherit the copyright of each original data work in the case where the user 
extracts and incorporates his own desired portion from a plurality of 
copyright data to create new data. 



[Embodiment 16] 



Because a copyright is a kind of property right, it is a matter of course 
that the charges for using the copyright occurs. Further, services such as 
offering of a secret-key and a copyright control program should be performed 
for charge. 

The simplest method for paying these charges is a combinaUon of a bill 
and payment. However, this method is complex in its operation and further 
may cause a trouble such as nonpayment even though the charge for using a 
copyright is directly paid. 
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There is a charge collection substitution method performed by, for 
example, a communication line enterprise, which is simple and has only a 
small risk of nonpayment because charges are collected by the 
communication line enterprise. However, it is necessary to pay a 
commission for charge collection substitution because charges are not directly 
collected. 

To solve the above problem, there is a method for using digital cash. 
The digital cash is digital data used instead of cash in a computer connected to 
a communication network, which is encrypted and used. 



[Embodiment 17] 



Further, the configuration of the data copyright management system 
described above can be applied not only to the data distribution but also to the 
distribution of the digital cash. 

The digital cash system which has been proposed so far is based on a 
secret-key cryptosystem. The encrypted digital cash data is transferred from a 
bank account or a cash service of a credit company, and is stored in the IC card 
so that a terminal device for input/ output is used to make a payment. The 
digital cash system which uses the IC card as a cash-box can be used at any 
place such as shops or the like as long as the input/output terminal is 
available. However, the system cannot be used at places such as homes or the 
like where no input/ output terminal is available. 
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Since the digital cash is an encrypted data, any device can be used as the 
cash-box which stores digital cash data, in addition to the IC card, as long as 
the device can store encrypted data and transmit the data to the party to which 
the payment is made. As a terminal which can be specifically used as the 
cash-box, there are personal computers, intelligent television sets, portable 
telephone sets such as personal digital assistant (PDA), personal handyphone 
system (PHS), intelligent telephone sets, and PC cards or the like which has 
the input/output function. 

In transactions where such terminals are used as a cash-box for digital 
cash, the digital cash system can be actualized by replacing in the 
configuration of the data copyright control system, database 1 with a 
customer's bank, a first user terminal 4 with a customer, the second user 
terminal 5 with a retailer, copyright management center 18 with a retailer's 
bank and a third user terminal 6 with a wholesaler or a manufacturer. 

Further, it is desirable that the digital cash is processed as an object 
associated with data and functions instead of being simple data. 

In handling digital cash, there are a common digital cash form, an 
unentered digital cash form private for an owner, an entry column in the 
digital cash form private for the owner, digital cash data showing an amount 
of money, an instruction of handling digital cash, and a digital cash form 
private for the owner in which an amount of money is entered. In an object- 
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oriented programming, the concepts such as an object, a class, a slot, a 
message and an instance are used. 

In the corresponding relations, the common digital cash form becomes 
an object, the unentered digital cash form private for an owner becomes a 
class, the entry column of a digital cash form private for the owner becomes a 
slot, the instruction of handling digital cash becomes a message and the 
digital cash form private for the owner in which an amount of money is 
entered becomes an instance* Digital cash data comprising the amount of 
money and the like is used as an argument Then, the data is transferred and 
stored in a slot which is referred to as an instance variable by the message so 
that a new instance is made which is digital cash in which the amount of 
money is renewed. 

The digital cash which constitutes an object will be explained by using 
Figure 7. In Figure 7, reference numerals 23, 25 and 27 represents digital cash 
form private for the customer in which the amount of money stored in a 
customer terminal is entered, 29 represents a digital cash form private for the 
retail shop in which the amount of money stored in a retail shop terminal is 
entered, and 24, 26 and 28 represents accounts of each customers bank. 

Customer 23 draws out necessary amount of money from the account 
24 to use the digital cash, and transfers the data 31 of the digital cash to the 
digital cash form 23 which is stored in the terminal In this case, residual 
amount data 30 of the digital cash is usually entered in the digital cash form 
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23. The digital cash form is not a class but an instance. The drawn out data 31 
of the digital cash is transferred as an argument to the slot which is an entry 
column of the digital cash form 23 with the message instructing the addition 
to the residual amount data 30 of the digital cash. Then the drawn out data 31 
of the digital cash is added to the residual amount data 30 of the digital cash in 
the digital cash form 23 so that a new instance is created in which the amount 
of money in the entry column of the digital cash form 23 is changed. 

In the case where the customer makes a payment to the retail shop, the 
payment data 32 of the digital cash which corresponds to the paid amount is 
transferred as an argument to the slot which is an entry column of the digital 
cash form 23 with the message instructing the subtraction from the amount 
in the entry column of the digital cash form 23. Then payment data 32 of the 
digital cash is subtracted from the residual amount data 30 and the drawn out 
data 31 in the digital cash form 23 so that a new instance is created in which 
the amount of money in the entry column of the digital cash form 23 is 
changed. 

Further, the payment data 32 of the digital cash is transferred to the 
digital cash form 29 private for the retail shop. 

A similar withdrawal processing and payment processing are 
performed by digital cash forms 25 and 27 for other customers. The payment 
data 33 of the digital cash is transferred from the digital cash form 25, and the 
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payment data 34 of the digital cash is transferred from the digital cash form 27 
to the digital cash form 29 private for the retail shop. 

In the case of the digital cash 29 private for the retail shop, the residual 
amount data 35 of the digital cash is usually entered. The payment data 32 of 
the digital cash, the payment data 33 of the digital cash, and the payment data 
34 of the digital cash are transferred as arguments to the slot which is an entry 
column of the digital cash form 29 with the message instructing the addition 
to the residual amount data 35 of the digital cash so that the payment data 32, 
33 and 34 of the digital cash are added to the residual amount data 35 of the 
digital cash, and a new instance is created in which the amount of money in 
the entry column of the digital cash form 29 is changed. 

In a normal object-oriented programming, it is impossible that an 
argument is transferred to a slot with the message so that a new instance is 
created and the newly created instance as a whole is transferred. However, in 
the case of the digital cash, since the cryptosystem is used for security, an 
instance can be created in which the payment data of the digital cash is 
entered at the payer. This instance can be encrypted and transferred to the 
payee. 

An embodiment of the transaction system will be explained in which 
the digital cash is transferred via a communication network by using Figure 8. 
The embodiment is a modification of embodiment 9 by using a system 
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shown in Figure 4. In Figure 4, reference numeral 36 represents a customer, 
37 a bank of customer 36, 38 a retail shop, 39 a bank of retail shop 38, 40 a 
manufacturer, 41 a bank of manufacturer 40, 8 a public line provided by a 
communication enterprise or a communication network such as CATV line 
provided by a cable television enterprise. Customer 36, customer's bank 37, 
retail shop 38, retail shop's bank 39, manufacturer 40, manufacturer's bank 41 
can be mutually connected with communication network 8. In this system, 
customer 36 can use cash service offered by a credit company other than banks 
and he can also interpose appropriate number of wholesalers between the 
retail shop and the manufacturer. 

In addition, 42 and 43 are either IC cards or PC cards in which digital 
cash data is stored. The cards are used when the communication network is 
not used. 

In Figure 8, the broken line represents a path of encrypted- digital cash 
data, the solid line represents a path of requests from the customer, the retail 
shop or the manufacturer, and the one-dot chain line represents a path of the 
secret-key from each bank. 

Further, in this embodiment, the first secret-key prepared by customer's 
bank 37, the second secret-key generated by the customer, the third secret-key 
generated by the retail shop, and the fourth secret-key prepared by the 
manufacturer are used as crypt keys. 
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In this embodiment, customer's bank 37, retail shop's bank 39, and 
manufacturer's bank 41 are explained as separate entities. These can be 
considered as a financial system as a whole. 

The digital cash management program P for encrypting and decrypting 
the digital cash data is preliminarily distributed to customer 36 and is stored 
in the user terminal. Further, it is possible to transfer the digital cash 
management program P together with data every time a transaction with the 
bank is executed. Further, it is desirable to install the common digital cash 
programs P in all banks. 

Customer 36 uses the user terminal to designate the amount of money 
via communication network 8 to request a withdrawal from the account of 
customer's bank 37 to the bank. At this time, the terminal presents customer 
information Ic. 

Customer's bank 37 which receives the customer's request of 
withdrawal from the account selects or generates the first secret-key Ksl so 
that the digital cash data MO of the amount is encrypted by the first secret-key 
Ksl: 

CmOksl-E(Ksl,MO) 
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and the encrypted digital cash data CmOksl and the first secret-key Ksl for a 
decrypting key are transferred to customer 36, and the customer information 
Ic and the first secret-key Ksl are stored. 

In this case, the first secret-key Ksl can be selected from what is 
preliminarily prepared by customer's bank 37, and also may be generated by 
presentation of the customer information Ic at the time of withdrawal of the 
customer using the digital cash management program P on the basis of the 
customer information Ic: 

Ksl=P(Ic). 

In this manner, the first secret-key Ksl can be private for customer 36. 
At the same time, it is not necessary to transfer the first secret-key Ksl to 
customer 36 so that the security of the system can be heightened. Further, the 
first secret-key Ksl can be generated on the basis of the bank information lbs 
of customer's bank 37 or on the basis of the bank information lbs and the date 
of key generation. 

Customer 36 to which the encrypted digital cash data CmOksl and the 
first secret-key Ksl are transferred generates the second secret-key Ks2 
according to one or both of the customer information Ic and the first secret- 
key Ksl using the digital cash management program P: 

Ks2=P(Ic) 
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The generated second secret-key Ks2 is stored in the user terminal. 

Further, customer 36 uses the secret-key Ksl to decrypt the encrypted 
digital cash data CmOksl with the digital cash management program P: 

MO=D(Ksl, CmOksl) 

and the content is confirmed* When the decrypted digital cash data MO 
whose content is confirmed is stored in the user terminal which is a cash-box, 
the generated second secret-key Ks2 is used to encrypt the content by the 
digital cash management program P: 

CmOKs2=E(Ks2,MO). 

The first secret-key Ksl is disused at this time* 

Customer 36 who wishes to buy an article from retail shop 38 decrypts 
the encrypted digital cash data CmOks2 which is stored in the user terminal as 
a cash-box by the digital cash management program P by using the second 
secret-key Ks2: 

MO=D(Ks2, CmOks2) 
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and the digital cash data Ml which corresponds to the necessary amount of 
money is encrypted by the second secret-key ks2 using the digital cash 
management program P: 

Cmlks2=E(Ks2, Ml) 

and then, the payment is made by transmitting the encrypted digital cash data 
Cmlks2 to the user terminal as a cash-box of retail shop 38 via 
communication network 8. 

At this time, the customer information Ic is also transmitted to the user 
terminal of retail shop 38. 

Further, the residual amount digital cash data M2 is encrypted by the 
second secret-key Ks2 using the digital cash management program P: 

Cm2ks2=E(Ks2, M2) 

and stored in the user terminal of customer 36. 

Retail shop 38 to which the encrypted digital cash data Cmlks2 and the 
customer information Ic are transferred stores the transferred encrypted 
digital cash data Cmlks2 and customer information Ic in the user terminal. 
At the same time, the customer information Ic is presented to retail shop's 
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bank 39 via communication network 8 for confirming the content and the 
transmission for decryption key is requested. 

Retail shop's bank 39 which is requested by retail shop 38 to transmit 
the second secret-key Ks2 transmits the request of the transmission of the 
second secret-key Ks2 and the customer information Ic to customer's bank 37. 

Customer's bank 37 which is requested to transmit the second secret- 
key Ks2 from retail shop's bank 39 generates the second secret-key Ks2 
according to the customer information Ic by the digital cash management 
program P in the case where the second secret-key Ks2 is based only on the 
customer information Ic, or generates the second secret-key Ks2 according to 
the customer information Ic and the first secret-key Ksl by the digital cash 
management program P in the case where the second secret-key Ks2 is based 
on the customer information Ic and the first secret-key Ksl, and transmits the 
generated second secret-key Ks2 to shop's bank 39. 

Retail shop's bank 39 to which the second secret-key Ks2 is transmitted 
from the customer's bank 37 transmits the second secret-key Ks2 to retail shop 
38 via communication network 8. Retail shop 38 to which the second secret- 
key Ks2 is transferred decrypts the encrypted digital cash data Cmlks2 by the 
second secret-key Ks2 using the digital cash management program P: 

Ml=D(Ks2, Cmlks2) 
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After confirming the amount of money, retail shop 38 transfers the article to 
customer 36. 

In this case, retail shop 36 can directly request the transfer of the second 
secret-key Ks2 to customer's bank 37 instead of retail shop's bank 39. 

In cases where the digital cash received by retail shop 38 is deposited in 
the account of retail shop's bank 39, the customer information Ic is 
transferred to retail shop's bank 39 together with the encrypted digital cash 
data Cmlks2 via communication network 8. 

Retail shop's bank 39 to which the encrypted digital cash data Cmlks2 
and the customer information Ic are transferred requests the transfer of the 
second secret-key Ks2 to customer's bank 37 by transmitting the customer 
information Ic. 

Customer's bank 37, which is requested to transfer the second secret-key 
Ks2 from retail shop's bank 39, generates the second secret-key Ks2 according 
to the customer's information Ic by the digital cash management program P 
when the second secret-key Ks2 is only based on the customer's information 
Ic, or generates the second secret-key Ks2 according to the customer's 
information Ic and the first secret-key Ksl by the digital cash management 
program P when the second secret-key Ks2 is based on the customer's 
information Ic and the first secret-key Ksl, then the generated second secret- 
key Ks2 is transferred to retail shop's bank 39. 
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Retail shop's bank 39, to which the second secret-key Ks2 is transferred 
from customer's bank 37, decrypts the encrypted digital cash data Cmlks2 by 
the second secret-key Ks2 using the digital cash management program P: 

Ml=D(Ks2, Cmlks2) 

and the decrypted digital cash data Ml is deposited in the bank account of 
retail shop 39. 

In the general trade system, retail shop 38 stocks products from 
manufacturer 40 or from the whole sale shops which come between retail 
shop 38 and the manufacturer 40- Then retail shop 38 sells the products to 
customer 36- Consequently, a transaction form is present between customer 
36 and retail shop 38 just as between retail shop 38 and manufacturer 40. 

The handling of the digital cash between retail shop 38 and 
manufacturer 40 is not basically different from the handling of the digital cash 
which is carried out between customer 36 and retail shop 38. Therefore, the 
explanation will be omitted for the sake of clarity. 

In this digital cash system, the digital cash is handled through bank. As 
information such as the processed amount of the digital cash, date, and the 
secret-key demanding party information with respect to the handling of the 
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digital cash is stored in the customer's bank, the residual amount and usage 
history can be obtained. 

Even in the case where the user terminal which is a cash-box storing 
the digital cash data cannot be used owing to the loss or the breakage A it is 
possible to reissue the digital cash on the basis of the residual amount and 
usage history maintained in the customer's bank. 

It is desirable to add a digital signature to the digital cash data for 
improve the security of the digital cash. In this embodiment, digital cash is 
added by the customer's information which may be accompanied by digital 
signature. Therefore, the digital cash in the embodiment can also have a 
function of settlement system for checques drawn by customers. 

Also this system can be applied to various systems such as a negotiation 
of a draft by a letter of credit and a bill of lading in the international trading, 
which have been executed by documents. 

[Embodiment 18] 

The digital cash in the digital cash system which is explained in 
embodiment 17 is always handled through bank. However, since it is possible 
to handle the digital cash without bank intervention, the digital cash system 
in which the bank does not intervene will be explained. 
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In the digital cash system, a public-key and a private-key are used as 
crypt keys for encrypting the digital cash data. The secret-key ks and customer 
information 1c used in embodiment 17 is not used. Consequently, in this 
digital cash system, the digital cash is used in the same form as money. 

Since other points are not different from the system configuration 
shown in embodiment 17, concrete explanation is omitted. 

The party which receives the digital cash from a bank, a customer, a 
retail shop or a manufacturer with respect to this digital cash system prepares 
the public-key and the private-key. The public-key can be preliminarily sent 
to the party which is scheduled to make a payment, or can be sent to the party 
before a transaction is executed. Here an explanation is made on the 
supposition that the key is preliminarily distributed. 

Customer 36 requests to customer's bank 37 for withdrawing the 
money from the bank account via communication network 8 from a user 
terminal, by indicating an amount of the money. 

Customer's bank 37 which receives the request for withdrawing money 
from customer 36 encrypts the digital cash data Mo of the amount of money 
drawn by a customer public-key Kbc which is preliminarily sent, using the 
digital cash management program P 

Cm0kbc=E(Kbc,MO) 
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and transfers the encrypted digital cash data CmOkbc to customer 36. 

Customer 36 to which the encrypted digital cash data CmOkbc is 
transferred decrypts the digital cash data by the customer private-key Kvc 
which corresponds to the customer public-key Kbc using the digital cash 
management program P: 

M0=D(Kvc, CmOkbc) 

Customer 36 confirms the content and changes the residual amount to 
M2(==MO+Ml) in the case where there is a residual amount data Ml in the 
terminal Then, the digital cash data M2 the amount of which is changed is 
encrypted with the customer public-key Kbc with the digital cash 
management program P: 

Cm2kbc=E(Kbc,M2) 

and stored in the terminal 

Customer 36 who wishes to buy products from retail shop 38 decrypts 
the encrypted digital cash data Cm2Kbc stored in the terminal by the customer 
private-key Kvc using the digital cash management program P: 

M2=D(Kvc, Cm2kbc) 
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and encrypts the digital cash data M3 corresponding to the required amount 
of money with the digital cash management program P by the retail shop 
public-key Kbs which is preliminarily sent: 



Cm3kbs=E(Kbs,M3) 

The payment is made by transferring the digital cash data to the terminal of 
retail shop 38 via communication network 8. 

Further, the residual amount digital cash data M4(=M2-M3) is 
encrypted by the customer public-key Kbc using the digital cash management 
program P: 

Cm4kbc=E(Kbc,M4) 

and stored in the terminal. 

Retail shop 38 to which the encrypted digital cash data Cm3Kbs is 
transferred decrypts the digital cash data with the digital cash management 
program P by the retail shop private-key Kvs corresponding to the retail shop 
public-key Kbs: 

M3=D(Kvs, Cm3kbs) 



117 



Retail shop 38 confirms the content and changes the residual amount data to 
M6(M5+M3) in the case where the residual amount data M5 is present in the 
terminal. Then, the digital cash data M6 in which the amount of money is 
changed is encrypted with the retail shop public-key Kbs with the digital cash 
management program P: 

Cm6kbs=E(Kbs,M6) 

and stored in the terminal 

Retail shop 38 which is willing to settle the stock account of products to 
manufacturer 40 makes the settlement using the same manner. 

In the general trade system, retail shop 38 stocks products either from 
manufacturer 40 or the wholesaler placed between retail shop 38 and 
manufacturer 40 and sells the products to customer 36. Consequently, a trade 
form similar to the trade form between customer 36 and retail shop 38 is 
present between retail shop 38 and manufacturer 40. 

Since the handling of the digital cash between retail shop 38 and 
manufacturer 40 is not basically different from the handling of digital cash 
between customer 36 and retail shop 38, an explanation is omitted for the sake 
of clarity. 
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In the embodiments 17 and 18, a configuration of a data copyright 
management system explained by using Figure 4 is applied to actualize the 
digital cash system- Further, customer information is used and the secret-key 
to be used is altered in embodiment 17. The public-key and the private-key 
are used in embodiment 18. 

However, as a system configuration for actualizing the digital cash 
system, the configuration of other copyright management systems such as any 
configuration of the data copyright management system shown in Figure 1, 2, 
3 and 5 can be applied. Further, as a cryptosystem used in the case, any of the 
cryptosystems explained in embodiments 1 through 13 using the non-altered 
secret-key, the public-key and the private-key, a combination of the secret-key, 
public-key and the private-key, and complex keying can be applied. 

[Embodiment 191 

In the video conference system, a television picture has been added to 
the conventional voice telephone set. Advanced video conference system 
shows a system in which a computer system is incorporated in the video . 
conference system so that the quality of the voice and the picture are 
improved, and data can be handled simultaneously with the voice and the 
picture. 

Under these circumstances, security against the violation of the user's 
privacy and the data leakage due to eavesdropping by persons other than the 



119 



participants of the conference are protected by the cryptosystem using a secret- 
key. 

However, since the conference content obtained by the participants 
themselves are decrypted, when participants themselves store the content of 
the conference and sometimes edit the content and further, use for secondary 
usage such as distribution to the persons other than the participants of the 
conference, the privacy of other participants of the video conference and data 
security remains unprotected. 

In particular, as the compression technology of the transmission data is 
advanced and the volume of the data storage medium increases, it is possible 
that all the content of the video conference is copied to the data storage 
medium or transmitted via a network. 

In view of the circumstances, embodiment 19 is intended; when video 
conference participants perform secondary use, to secure the privacy of other 
participants and data security by using the aforementioned configuration of 
the data copyright management system. 

This video conference data management system can be actualized, for 
example, by replacing database 1 in the data copyright management system 
configuration shown in Figure 4 with a participant of the video conference, 
the first user terminal 4 with another participant of the video conference, and 
the second user terminal 5 with non-participant of the video conference. 
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Embodiment 19 will be explained by using Figure 9. Referring to Figure 
9, reference numeral 44 represents a participant as a host of the video 
conference, 45 a participant of the video conference as a guest, 46 a non- 
participant of the video conference as a user, 47 a non-participant of the video 
conference as another user, 8 a communication network such as a public 
telephone line provided by the communication enterprise and a CA 
television line provided by the cable television enterprise or the like. 
Participant 44 of the video conference is connected to participant 45 of the 
video conference via communication network 8. Further, participant 45 of 
the video conference can be connected to non-participant 46 of the video 
conference, and non-participant 46 of the video conference to non-participant 
47 of the video conference, via communication network 8. Reference 
numeral 48 represents a data recording medium. 

Referring to Figure 9, the broken line is a path of the encrypted video 
conference content, the solid line is a path requesting the crypt key from non- 
participants 46 and 47 of the television conference to participant of the 
television conference 44, and the one-dot chain line is a path of crypt keys 
from participant of the video conference 44 to participant of the video 
conference 45 and non-participants of the video conference 46 and 47. 

In this embodiment, a video conference data management system is 
described here only for the protection for data security and privacy in case of 
video conference participant 44 to simplify the explanation. However, it is of 
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course, possible to protect for data security and privacy of the video 
conference participant 45. 

A video conference data management program P for 
encryption/decryption of the video conference data is previously distributed 
to video conference participant 45 and video conference non-participants 46 
and 47, and is stored in each terminal. The video conference data 
management program P may be transferred whenever a crypt key is 
transferred. 

In this embodiment, further, a first secret-key prepared by video 
conference participant 44, a second secret-key prepared by video conference 
participant 45 and a third secret-key prepared by video conference non- 
participant 46 are also used. 

Video conference participant 44 and video conference participant 45 
perform the video conference by transmitting audio, picture and data 
(referred to as video conference data on the whole) each other, using each 
terminal via communication network 8. Before the video conference, video 
conference participant 44 generates or selects the first secret-key Ksl to transfer 
to video conference participant 45 prior to the start of the video conference. 

Video conference participant 45 receives the first secret-key Ksl and 
generates the second secret-key Ks2 by the first secret-key Ksl using the video 
conference data management program P: 
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Ks2=P(Ksl). 

The generated second secret-key Ks2 is stored in the terminal. 

Participant 44 of the video conference encrypts the video conference 
data MO with the first secret-key Ksl in the video conference via 
communication network 8: 

CmOksl=E(Ksl,MO) 

and transfers the encrypted video conference data CmOksl to video 
conference participant 45. 

Participant 45 of the video conference who receives the video 
conference data CmOksl encrypted by the first secret-key Ksl decrypts the 
video conference data CmOksl by the first secret-key Ksl: 

M0=D(ksl, CmOksl) 

and uses decrypted video conference data MO. 

Further, the second secret-key Ks2 is generated based on the first secret- 
key Ksl with the video conference data management program P: 
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Ks2=P(Ksl). 



In the case where the decrypted video conference data MO is stored in 
the terminal of participant 45 of the video conference, copied to data record 
medium 48, or transferred to the non-participant of the video conference via 
communication network 8, the data M is encrypted by the second secret-key 
Ks2 using the video conference data management program P: 

Cmks2=E(Ks2, M). 

The encrypted data Cmks2 is copied to record medium 48 or supplied to 
the non-participant of the video conference via communication network 8, 
together with the video conference data name or the video conference data 
number. 

Non-participant 46 of the television conference who obtains the 
encrypted data CmKs2 makes a request to participant 44 for the secondary use 
of the video conference data M from the terminal by specifying the name or 
number of the video conference data. 

Participant 44 of the video conference who receives the request for the 
second use of the data M finds out the first secret-key Ksl according to the 
name or the number of the video conference data name or number to 
generate the second secret-key Ks2 based on the first secret-key Ksl: 
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Ks2=P(Ksl) 



and supplies the generated second secret-key Ks2 to non-participant 46 of the 
video conference. 

Non-participant 46 of video conference who receives the second secret- 
key Ks2, decrypts the encrypted data Cmks2 by the second secret-key Ks2 by 
using the television conference data management program P: 

M=D(Ks2, Cmks2) 

and then, uses decrypted video conference data M. 

In the case where the video conference data M is stored in the terminal 
of non-participant 46 of the video conference, copied to record medium 49, or 
transmitted to non-participant 47 of the video conference, the video 
conference data M is encrypted by the second secret-key Ks2 using the video 
conference data management program P: 

Cmks2=E(Ks2, M). 

The third secret-key Ks3 may be generated on the basis of the second 
secret-key Ks2 with the television conference data management program P: 

Ks3=P(Ks2) 
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The data M can be encrypted with the video conference data 
management program P by this generated third secret-key Ks3: 

Cmks3=E(Ks3, M). 

In embodiment 19 described above, the configuration of the data 
copyright management system which is explained by using Figure 4 for 
realizing the video conference data management system is applied and alter 
the secret-key which has been used. 

However, as a configuration of a system for realizing the video 
conference data system, other system configuration, for example, any of 
system configurations shown in Figure 1, 2, 3, 4 and 5 can be applied. Further, 
as cryptosystem used in such a case, the non-altered secret-key, the public-key 
and the private-key,a combination of the secret-key, the public-key and the 
private-key, and the complex keying which is explained from embodiment 1 
to 13 can be applied. 

Further, in this explanation, it is supposed that the participant of the 
video conference as a guest stores and uses the video conference data, copies 
the data on the record medium and transfers the data via the communication 
network. It is also possible to limit these actions by disusing the crypt key 
used in the encryption process. 
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[Embodiment 20] 

As described above, each user who uses the system of the present 
invention must previously be entered in a database system, and when 
entered in the system, software for database is supplied to the user. 

Because the software includes not only normal communication 
software such as a data communication protocol but also a program for 
decrypting a copyright control program by a first crypt key, it needs to be 
protected. 

In the case of the present invention, a first crypt key Kl, a second crypt 
key K2, and a copyright control program P are transferred to each user in 
order to use data M. Therefore, each user must keep these keys and the 
program. Further, the copyright information label, user information, the 
public-key and private-key in the public-key cryptosystem and the program 
containing algorithm for generating the secret-key are kept when needed. 

For keeping them, it is the simplest to use a flexible disk. However, in 
the flexible disk it is easy to lose or alter data. 

A hard disk drive is also unstable against losing or altering data though 
it is more stable than the flexible disk. 
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Recently, IC cards have become available in which an IC element is 
sealed in a card-like package. Particularly, standardization of a PC card with a 
microprocessor sealed in it has progressed as a PCMCIA (Personal Computer 
Memory Card International Association) card or JEIDA card. 

Figure 10 shows an embodiment of the database copyright management 
system of the present invention constituted by using the PC card. In Figure 
10, reference numeral 50 represents a microprocessor of a user terminal, 51 
represents a system bus, and 52 represents a PC card in which a PC card 
microprocessor 53, read-only memory 55, and random-access memory 56 are 
sealed. System bus 51, microprocessor 53, read-only memory 55, random- 
access memory 56 are connected with each other by PC card microprocessor 
bus 54. 

Read-only memory 55 stores fixed information such as database 
software and user data as a database. Read-only memory 55 also-stores a first 
crypt key, a second crypt key, and a copyright control program supplied from 
key control center 9 or a copyright management center. Because data is also 
written in read-only memory 55, it is the simplest to use an EEPROM for 
memory 55. 

As previously described, because data, the crypt key, and the copyright 
control program can be encrypted and supplied to the users, in order to use 
data it is necessary to decrypt these crypt key, copyright control program and 
the data. 
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To perform the above operations, microprocessor 50 of the user 
terminal uses the software, crypt key and copyright control program stored in 
read-only memory 55 of PC card 52. 

In this case, however, there is a risk that these data information may be 
used illegally because they are transferred to the user terminal. To avoid the 
risk, it is necessary to make microprocessor 55 in PC card 52 perform every 
operation by using random-access memory 56 through CPU bus 54 and 
transfer results only to the user terminal for various types of utilization. 

It is understood that particular embodiments described herein should 
not limit the present invention thereby. This invention can be practiced in 
connection with any data management system. For example, when the PC 
card is used, a different unit can be used as the user terminal. It is also 
possible to use a board or external unit having the above functions in 
addition to the PC card. 

Thus, a database copyright control system has been described, which is 
applicable to multimedia system. 
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CLAIMS OF THE PRESENT INVENTION 



1. A data copyright management system for managing the 
copyright of data which is encrypted and supplied from a database to a user, 
said data copyright management system having the database and a key control 
center; 

wherein a key for decrypting said encrypted data is supplied from said 
key control center to said user; 

said user uses said key for decrypting when said user displays or edits 
said data to decrypt said encrypted data; and 

said data is re-encrypted when said user stores, copies or transfers said 
data or data which has been edited. 

2. A data copyright management system according to claim 1 
wherein said key used in said reencryption is different from said key for 
decryption, 

3. A data copyright management system according to claims 1 or 2 
wherein a copyright control program is further used for managing the 
copyright of said data. 

4. A data copyright management system according to claim 3 
wherein said data copyright control program is stored in a ROM of a device 
which said user uses. 
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5. A data copyright management system according to claim 3 
wherein said data copyright control program is stored in system area 
controlled by an operating system of the device which said user uses. 

6. A data copyright management system according to claims 1, 2, 4 
or 5 wherein a copyright information which is not encrypted with respect to 
said data copyright is further used. 

7. A data copyright management system according to claim 3 
wherein a copyright information which is not encrypted with respect to said 
data copyright is further used. 

8. A data copyright management system according to claims 1, 2, 4, 
5 or 7 wherein said copyright information which is not encrypted added to 
said encrypted data as a copyright information label, said copyright 
information label being stored, copied or transmitted together with said data 
in the case where said data is stored, copied or transmitted. 

9. A data copyright management system according to claim 3 
wherein said copyright information which is not encrypted added to said 
encrypted data as a copyright information label, said copyright information 
label being stored, copied or transmitted together with said data in the case 
where said data is stored, copied or transmitted. 
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10. A data copyright management system according to claim 6 
wherein said copyright information which is not encrypted added to said 
encrypted data as a copyright information label, said copyright information 
label being stored, copied or transmitted together with said data in the case 
where said data is stored, copied or transmitted. 

11. A data copyright management system according to claim 8 
wherein a digital signature is added to said copyright information label. 

12. A data copyright management system according to claim 9 
wherein a digital signature is added to said copyright information label. 

13. A data copyright management system according to claim 10 
wherein a digital signature is added to said copyright information label. 

14. A data copyright management system for using data encrypted 
and supplied from a database to a user, said data copyright management 
system comprising the database, a key control center and a copyright 
management center, 

wherein said data copyright management system uses secret-key, user 
information and copyright control program; 

said database encrypts the data with first secret-key to distribute the data 
to a first user via communication network, communication and broadcasting 
satellite, and record medium; 
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said first user provides the first user information to said key control 
center to request the use; 

said key control center transfers said first user information to said 
copyright management center; 

said key control center transfers the copyright control program together 
with said first secret-key and second secret-key to said first user via said 
communication network; 

said first user uses said first secret-key with said copyright control 
program to decrypt said encrypted data for use; and 

said data decrypted is re-encrypted in the case where said decrypted data 
is stored, copied or transmitted with said copyright control program by using 
said second secret-key, and uncrypted first user information is added. 

15. A data copyright management system according to claim 14 
wherein said first secret-key and said second secret-key are disused with said 
copyright control program, when said decrypted data is copied or transmitted; 
and 

said first user requests for the retransfer of said second secret-key for the 
reuse of said reehcrypted data to said copyright management center so that 
said second secret-key is retransmitted. 

16. A data copyright management system according to claim 15 
wherein the copy or transmit of said encrypted data is registered in said 
copyright management center according to the retransfer of said second secret- 
key. 
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17. A data copyright management system according to claim 15 or 16 
wherein second user presents said first user information to request the use to 
said copyright management center; 

said copyright management center transfers said second secret-key and 
third secret-key, and said copyright control program to said second user after 
confirming the retransfer of said second secret-key to said first user; 

said second user decrypts said encrypted data with said copyright 
control program by using said second secret-key; and 

said data is reencrypted and redecrypted with said copyright control 
program by using said third secret-key when said decrypted data is stored, 
copied or transmitted. 

18. A data copyright management system according to claims 14, 15, 
or 16 wherein said second secret-key is generated on the basis of any one or 
more of said first secret-key, said user information, and the usage frequency of 
said copyright control program with said copyright control program. 

19. A data copyright management system according to claim 17 
wherein said second secret-key is generated on the basis of any one or more of 
said first secret-key, said user information, and the usage frequency of said 
copyright control program with said copyright control program. 

20. A data copyright management system for using data encrypted 
and supplied from a database to a user, said data copyright management 
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system comprising a database, a key control center and a copyright 
management center; 

wherein said data copyright management system uses secret-key, user 
information and copyright control program; 

first user presents the first user information to the database to request 
the use of the data; 

said database encrypts requested said data by using first secret-key and 
transfers it to said first user via said communication network together with 
said first secret-key, second secret-key and said copyright control program; 

said key control center transfers said first user information to said 
copyright management center; 

said key control center transfers the copyright control program together 
with said first and second secret-keys to said first user via said 
communication network; 

said first user decrypts and uses said encrypted data with said copyright 
control program by using said first secret-key; and 

said data decrypted is re-encrypted when said decrypted data is 
stored,copied or transmitted with said copyright control program by using 
said second secret-key, and uncrypted first user information is added. 

21. A data copyright management system according to claim 20 
wherein said first and second secret-keys are disused with said copyright 
control program when said decrypted data is copied or transmitted; 

said first user requests retransfer of said second secret-key for the reuse 
of the reencrypted data to said copyright management center; and 
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said second secret-key is retransferred. 

22. A data copyright management system according to claim 21 
wherein the copy or transmit of said encrypted data is registered in said 
copyright management center according to the retransfer of said second secret- 
key. 

23. A data copyright management system according to claim 21 or 22 
wherein second user presents said first user information to request the use to 
said copyright management center; 

said copyright management center transfers said second secret-key, 
third secret-key and said copyright control program to said second user after 
confirming the retransfer of said second secret-key to the first user; 

said second user decrypts said encrypted data with said copyright 
control program by using said second secret-key; and 

said data is reencrypted and redecrypted with said copyright control 
program by using said third secret-key in the case where said decrypted data is 
stored, copied or transmitted. 

24. A data copyright management system according to claims 20, 21, 
or 22 wherein said second secret-key is generated on the basis of any one or 
more of said first secret-key, said user information, and the usage frequency of 
said copyright control program with said copyright control program. 
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25. A data copyright management system according to claim 23 
wherein said second secret-key is generated on the basis of any one or more of 
said first secret-key, said user information, and the usage frequency of said 
copyright control program with said copyright control program. 

26. A data copyright management system for using data encrypted 
and supplied from a database to a user, said data copyright management 
system comprising a database, a key control center and a copyright 
management center; 

said data copyright management system uses secret-key, public-key and 
private-key; 

first user presents first public-key, second public-key and first user 
information to request the use of the desired data to said key control center; 

said database which receives the request for use encrypts said data by 
using first secret-key, encrypts said first secret-key by using said first public- 
key, and encrypts second secret-key by using said second public-key; 

said encrypted data, said encrypted first secret-key, said encrypted 
second secret-key and said copyright control program are transmitted to said 
first user; 

said first user decrypts said encrypted first secret-key by using first 
private-key, decrypts said encrypted data by using said decrypted first secret- 
key, and decrypts said encrypted second secret-key by using second private- 
key, with said copyright control program; 
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said data is encrypted and decrypted with said copyright control 
program by using the second secret-key in the case where said decrypted data 
is stored, copied or transmitted, 

27. A data copyright management system according to claim 26 
wherein said first and second secret-keys are disused with said copyright 
control program when said decrypted data is copied or transmitted; 

said first user who reuses said encrypted data requests for the retransfer 
of said second secret-key for the reuse of said reencrypted data to said 
copyright management center; and 

said second secret-key is retransferred. 

28. . A data copyright management system according to claim 27 
wherein the copy or transmit of said encrypted data is registered in said 
copyright management center, 

29. A data copyright management system according to claim 27 or 28 
wherein second user presents said first user information to request the use to 
said copyright management center; 

said copyright management center transfers said second secret-key, 
third secret-key, and said copyright control program to said second user after 
confirming the retransfer of said second secret-key to said first user; 

said second user decrypts said encrypted data with said copyright 
control program by using said second secret-key; and 
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said data decrypted is reencrypted and redecrypted with said copyright 
control program by using said third secret-key in the case where said 
decrypted data is stored, copied or transmitted. 

30. A data copyright management system according to claims 26, 27, 
or 28 wherein said second secret-key is generated on the basis of any one or 
more of said first secret-key, said user information, and the usage frequency of 
said copyright control program. 

31. A data copyright management system according to claim 29 
wherein said second secret-key is generated on the basis of any one or more of 
said first secret-key, said user information, and the usage frequency of said 
copyright control program* 

32. A data copyright management system for using a plurality of data 
encrypted each by different secret-keys and supplied from database to a user, 
said system using a secret-key, user information and a copyright control 
program, said data copyright management system comprising: 

first user obtaining from a copyright management center a plurality of 
copyright control programs unique to original said plurality of data and a 
plurality of first secret-keys to decrypt said plurality of original data with a 
plurality of said first secret-keys; 

one or a plurality of second secret-keys being generated with a plurality 
of copyright control programs unique to said plurality of original data; 
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wherein said plurality of original data which are used or edited are 
encrypted with said one or a plurality of second secret-keys with said plurality 
of copyright control programs unique to said plurality of original data to be 
stored, copied or transmitted together with the edition process data; and 

said plurality of original data or said plurality of edited data encrypted 
with said one or plurality of second secret-keys are decrypted with said one or 
plurality of second secret-keys and said plurality of copyright control 
programs obtained from said copyright management center for second user to 
use and edit by using said edition process. 

33. A data copyright management system according to claim 32 
wherein said second secret-key is generated with said copyright control 
program on the basis of any one or more of said first secret-keys and said user 
information. 

34. A data copyright management system for using data encrypted 
and supplied from a database to a user, using a crypt key, user information 
and a copyright control program, comprising: 

said user presenting user information to said database; 

said database supplying said data encrypted with first crypt key to first 

user; 

said first user generating a second crypt key based on said first crypt key 
with said copyright control program; 

said encrypted data being decrypted by using said first crypt key in the 
case where said first user uses said encrypted data; and 
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said decrypted data being reencrypted by using said second crypt key in 
the case where said first user stores, copies or transmits said decrypted data, 

35. A data copyright management system according to claim 34 
wherein said crypt key is a secret-key. 

36. A data copyright management system according to claim 34 
wherein said crypt key is a public-key and a private-key. 

37. A digital cash management system for using digital cash 
encrypted and supplied from a financial organization to first user, 
comprising: 

said financial organization supplying a key for decrypting said 
encrypted digital cash data to said first user; 

said digital cash data being decrypted by using said decrypting key in the 
case where said first user confirms said digital cash data; and 

said data being reencrypted in the case where said first user stores said 
decrypted digital cash data, in the case where changed digital cash data is 
stored, or in the case where digital cash data is transmitted to said second user. 

38. A digital cash management system according to claim 37 wherein 
the key used in said reencryption is a crypt key which is different from said 
decrypting key. 
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39. A digital cash management system according to claims 37 or 38 
wherein a digital cash management program is further used for managing 
said digital cash. 

40. A digital cash management system according to claims 37 or 38 
wherein first user information which is not encrypted is further used. 

4L A digital cash management system according to claim 39 wherein 
first user information which is not encrypted is further used. 

42. A digital cash management system according to claims 37 or 38 
wherein said first user information which is not encrypted is added to said 
encrypted digital cash data as the first user information label to be stored or 
transmitted together with said digital cash data in the case where said digital 
cash data is stored, in the case where changed digital cash data is stored, or in 
the case where said digital cash data is transmitted to the second- user. 

43. A digital cash management system according to claim 39 wherein 
said first user information which is not encrypted is added to said encrypted 
digital cash data as the first user information label to be stored or transmitted 
together with said digital cash data in the case where said digital cash data is 
stored, in the case where changed digital cash data is stored, or in the case 
where said digital cash data is transmitted to the second user. 
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44. A digital cash management system according to claim 40 wherein 
said first user information which is not encrypted is added to said encrypted 
digital cash data as the first user information label to be stored or transmitted 
together with said digital cash data in the case where said digital cash data is 
stored, in the case where changed digital cash data is stored, or in the case 
where said digital cash data is transmitted to the second user 

45. A digital cash management system according to claim 41 wherein 
said first user information which is not encrypted is added to said encrypted 
digital cash data as the first user information label to be stored or transmitted 
together with said digital cash data in the case where said digital cash data is 
stored, in the case where changed digital cash data is stored, or in the case 
where said digital cash data is transmitted to the second user. 

46. A digital cash management system according to claim 42 wherein 
a digital signature is added to said first user information label. 

47. A digital cash management system according to claim 43 wherein 
a digital signature is added to said first user information label. 

48. A digital cash management system according to claim 44 wherein 
a digital signature is added to said first user information label. 

49. A digital cash management system according to claim 45 wherein 
a digital signature is added to said first user information label. 



143 



50, A digital cash management system for using digital cash 
encrypted and supplied from a financial organization to a first user, said 
system using a crypt key, user information and digital cash management 
program, comprising: 

said first user presenting the first user information to said financial 
organization; 

said financial organization providing said first user with said digital 
cash data encrypted by the first crypt key; 

wherein said first user generates a second crypt key on the basis of said 
first crypt key with said digital cash management program; 

said encrypted digital cash data is decrypted by using said first crypt key 
in the case where said first user confirms said encrypted digital cash data; 

said digital cash data decrypted is reencrypted by using said second crypt 
key to be stored said first user; 

said decrypted digital cash data is reencrypted by using said second crypt 
key and said digital cash data reencrypted is transmitted to second user 
together with said first user information in the case where said decrypted 
digital cash data is transmitted to said second user; 

said first user information is presented to said financial organization 
from said second user; 

said financial organization generates said second crypt key based on said 
first user information and transfers said second crypt key to said second user; 
and 
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said second user decrypts said reencrypted digital cash data with said 
digital cash management program by using said second crypt key which is 
transferred. 

51. A digital cash management system according to claim 50 wherein 
said crypt key is a secret-key. 

52. A digital cash management system according to claim 50 wherein 
said crypt key is a public-key and a private-key. 

53. A digital cash management system for using a digital cash 
encrypted and supplied from a financial organization to first user, said system 
using a public-key and a private-key, comprising: 

said first user presenting first public-key to said financial organization; 

said financial organization encrypting digital cash data with said first 
public-key to supply to said first user; 

said first user decrypting said digital cash data by using first private-key; 

second user presenting second public-key to said first user; 

said first user encrypting said digital cash data which is decrypted with 
said second public-key to transfer to said second user; and 

said second user decrypting said digital cash data by using second 
private-key. 
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54. A video conference data management system for using video 
conference data encrypted and supplied from first user to second user, 
comprising: 

a key for decrypting said encrypted video conference data being 
supplied from said first user to said second user; 

said encrypted video conference data being decrypted by using said 
decrypting key in the case where said second user uses said video conference 
data; and 

said data being reencrypted in the case where said second user stores 
decrypted said video conference data, in the case where edited video 
conference data is stored, or in the case where said video conference data is 
transmitted to third user. 

55. A video conference data management system according to claim 
54 wherein a crypt key used for said re-encryption is different from said 
decrypting key. 

56. A video conference data management system according to claims 
54 or 55 wherein a video conference data management program for managing 
said video conference data is further used. 

57. A video conference data management system according to claims 
54 or 55 wherein first user information which is not encrypted is further used. 



146 



58. A video conference data management system according to claim 
56 wherein first user information which is not encrypted is further used. 

59- A video conference copyright management system according to 
claims 54 or 55 wherein said uncrypted first user information is added to said 
encrypted video conference data as the first user information label which is 
copied or transmitted together with said video conference data in the case 
where said video conference data is stored, in the case where the edited video 
conference data is stored, or in the case where the video conference data is 
transmitted to third user, 

60. A video conference copyright management system according to 
claim 56 wherein said uncrypted first user information is added to said 
encrypted video conference data as the first user information label which is 
copied or transmitted together with said video conference data in the case 
where said video conference data is stored, in the case where the edited video 
conference data is stored, or in the case where the video conference data is 
transmitted to third user. 

61. A video conference copyright management system according to 
claim 57 wherein said uncrypted first user information is added to said 
encrypted video conference data as the first user information label which is 
copied or transmitted together with said video conference data in the case 
where said video conference data is stored, in the case where the edited video 
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conference data is stored, or in the case where the video conference data is 
transmitted to third user, 

62. A video conference copyright management system according to 
claim 58 wherein said uncrypted first user information is added to said 
encrypted video conference data as the first user information label which is 
copied or transmitted together with said video conference data in the case 
where said video conference data is stored, in the case where the edited video 
conference data is stored, or in the case where the video conference data is 
transmitted to third user. 

63. A video conference data management system according to claim 

59 wherein a digital signature is added to said first user information label 

64. A video conference data management system according to claim 

60 wherein a digital signature is added to said first user information label 

65. A video conference data management system according to claim 

61 wherein a digital signature is added to said first user information label 

66. A video conference data management system according to claim 

62 wherein a digital signature is added to said first user information label 

67. A video conference data management system for using video 
conference data encrypted and supplied from first user to second user, said 
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system using a crypt key, user information, and video conference data 
management program: 

wherein said second user presents second user information to said first 

user; 

said first user supplies to said second user said video conference data 
encrypted with the first crypt key; 

said second user uses said video conference data management program 
to generate the second crypt key based on said first crypt key; 

said encrypted video conference data is decrypted by using said first 
crypt key in the case where said second user uses said encrypted video 
conference data; and 

said decrypted video conference data is reencrypted by using said second 
crypt key in the case where said second user stores, copies or transmits said 
decrypted video conference data. 

68. A video conference data management system according to claim 
67 wherein said crypt key is a secret-key. 

69. A video conference data management system according to claim 
67 wherein said crypt key is a public-key and a private-key. 

70. A data copyright management apparatus connected for use to a 
system bus in main body of user terminal, comprising a microprocessor, a 
read only memory, reading and writing memory and EEPROM connected to a 
microprocessor bus: 
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ABSTRACT OF THE DISCLOSURE 



A data copyright management system comprises a database for storing 
original data, a key control center for managing crypt keys, copyright 
management center for managing data copyrights, and a communication 
network for connecting these sections. Data supplied from the database to 
users is encrypted and distributed. The users decrypts the encrypted data by 
crypt keys obtained from the key control center or copyright management 
center. To supply data to users, there are the following two methods: a one- 
way supplying of encrypted data to users by means of broadcasting or the like; 
and two-way supplying of encrypted data to users corresponding to users' 
requests. A crypt key system used for encrypting data uses a secret-key 
cryptosystem, a public-key cryptosystem or a cryptosystem combining a secret- 
key and a public-key and further uses a copyright control program to control 
data copyrights. When a user stores, copies, or transfers data, the data is 
encrypted by a crypt key different from a crypt key used for supplying the data. 
The former crypt key is supplied from the key control center or from the 
copyright management center, or generated by the copyright control program. 
The present invention can be applied to a data copyright management system 
for using not only single data but also a plurality of data supplied from a 
single database or a plurality of data supplied from a plurality of databases. 
Further, an apparatus to be used by the user to perform data copyright 
management is proposed. 
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Account No. 01-2340. 



ARMSTRONG, WESTERMAN, HATTORI, 
McLELAND & NAUGHTON 



Atty. Docket No. 990696 

1725 K Street, N.W., Suite 1000 

Washington, DC 20006 

Tel: (202) 659-2930 

Fax: (202) 887-0357 

WGK/nip 



Respectfully submitted, 




Reg. No. 22,631 



IN THE UNITED STATES PATENT AND TRADEMARK OFFTHF. 
In re the Application of: Makoto SAITO 



Serial Number: 08/536,747 
Filed: September 29, 1995 



Group Art Unit: 2766 
Examiner: Hrayr A. Sayadian 



For: DATA COPYRIGHT MANAGEMENT SYSTEM 

REVOC ATTON OF POWER OF ATTORNEY AND NEW APPOTNTMF1VT 

Honorable Commissioner 

of Patents and Trademarks 
Washington, D.C. 20231 

Dear Sir: 

The undersigned, assignee of the entire interest in and to the above-identified United States 
patent application, hereby revokes all powers of attorney previously given and appoints: 



Attorney 



Reg. No. 



Attorney 



Reg. No. 



James E. Armstrong, in 
William F. Westerman 
Ken-Ichi Hattori 
Le-Nhung McLeland 
Ronald F. Naughton 
William G. Kratz, Jr. 
Mel R. Quintos 
Donald W. Hanson 
Stephen G. Adrian 
Scott M. Daniels 
James P. Welch 



18,366 
29,988 
32,861 
31,541 
24,616 
22,631 
31,898 
27,133 
32,878 
32,562 
17,379 



John R. Pegan 18,069 

John F. Carney 20, 129 

Edward F. Welsh 22,455 

William L. Brooks 34,129 

John P. Kong 40,054 
James E. Armstrong, IV 42,266 

Nicholas E. Seckel P-44,373 

Raymond J. Ho 41,838 

Thomas E. Brown P-44,450 

James N.Baker 40,899 



as principal attorneys to prosecute said application and to transact all business in the Patent and 
Trademark Office connected therewith. 



Please address all future communications to: 



ARMSTRONG, WESTERMAN, HATTORI, 

McLELAND & NAUGHTON 
Suite 1000, 1725 K Street, N.W., 
Washington, DC 20006 
Tel:(202)659-2930 
Fax:(202)887-0357 

MITSUBISHI CORPORATION 

Date: Ju " e 25, 1999 By: ^SVzfcn C^j^ ^ 

Eisaku TAMURA 
General Manager 



